[helsinkiandrew]

Actually it was 33000 patients. 22000 have so far made statements to the police:

https://yle.fi/a/3-12543823

The owner of the company tried to sell it a few months later without declaring the data breach to the new owners and has been forced to pay €8M compensation: https://yle.fi/a/3-12479562

[lostlogin]

22,000 police statement were made?!

[helsinkiandrew]

Yes - these were probably done online, rather than involving a police station visit, the police have been soliciting for victims:

https://poliisi.fi/en/instructions-to-victims-of-hacking