Hackers have stolen sensitive information, including names, addresses, and photos of thousands of nursery children, some of which has been shared on the darknet. Approximately 8,000 children’s details were compromised by cyber criminals targeting the Kido nursery chain with demands for ransom. The hackers claim to possess data on parents and carers, along with safeguarding notes, and have contacted some parents for extortion purposes. The BBC reported that the cyber criminals responsible for the breach have published details of the attack on the darknet.
The leaked data includes profiles and images of 10 children, released as part of the extortion scheme against the nursery. Law enforcement advises against paying ransoms as it can fuel further cyber crimes. The hackers defended their actions by stating they deserve compensation for their penetration test efforts, conducted without authorization.
One parent, identified as Mary, revealed that the nursery promptly informed her family of the incident. Mary received an email from the hackers detailing the stolen information. Despite acknowledging the inevitability of such incidents, Mary praised the nursery’s handling of the situation.
Kido has been contacted for comment by the Mirror. The Metropolitan Police confirmed receiving a report of a ransomware attack on a London-based organization, with investigations ongoing in the early stages within the Cyber Crime Unit, and no arrests made.
This breach follows a series of cyber attacks on UK supermarkets, including ransomware incidents affecting Marks & Spencer, Co-op, and others in mid-April. Harrods successfully prevented a hacking attempt, while a food distributor cyberattack caused stock issues for Aldi, Tesco, and Sainsbury’s.