In 2022, the Finnish psychotherapy center Vaastamo was breached, and thousands of therapy patients had their private session notes stolen and held for ransom. Joe Tidy opens his new book, Ctrl+ Alt+ Chaos, with that case and the man behind it, Julius Kivimäki.

The choice of opening is no accident. Vaastamo was not a faceless corporate leak or a routine criminal extortion case. It was a violation of the most private kind, with deeply personal therapy notes turned into leverage. Tidy, the ’s first dedicated cyber correspondent, uses it to pull readers into a wider story about cybercrime and the people who shape it.

The book traces that culture back to its earliest incarnations in the 1980s and follows it through to the newest teenage cybercrime gangs. Along the way, Tidy gives voice to hackers, victims and investigators, trying to show a world that is often reduced to code, headlines and arrests. The result is part history and part field guide to a subculture that has kept mutating as fast as the technology around it.

That places Ctrl+ Alt+ Chaos alongside a small but important body of writing on hacking and online subcultures. Gabriella Coleman’s 2015 study of Anonymous, Hacker, Hoaxer, Whistleblower, Spy, and Jonathan Lusthaus’s Industry of Anonymity are among the books that help frame the terrain Tidy is entering. His version is less academic than those works, but the Vaastamo breach gives it immediate weight.

The tension in the book is that cybercrime is often told as a story of technical ingenuity, while its real damage is deeply human. Vaastamo shows that clearly. Thousands of patients did not lose only data; they lost a sense that what they said in a therapy room would stay there. That is the breach Tidy starts from, and it is what makes the book hard to dismiss as another tour through digital mischief.

What comes next in the book is a broader account of how the scene evolved, from crude early forms in the 1980s to younger gangs now operating with far more confidence and reach. Tidy’s central figure, Kivimäki, gives that arc a face. But the larger judgment is sharper than any single name: cybercrime has moved far beyond prankish rebellion, and the harm it causes now lands in the most personal parts of ordinary life.