Credited from: INDIATIMES
Hackers identifying themselves as Radiant have reportedly stolen sensitive data, including names, pictures, and addresses of around 8,000 children enrolled at Kido Nurseries located mainly in London. These cybercriminals are utilizing this information to extort the nursery chain for ransom, as confirmed by multiple reports including BBC and Reuters.
The breach appears to have been linked to a software service called Famly, which Kido uses to host its data. A Kido employee confirmed to the BBC that staff had been notified of the data theft. Authorities, including the Metropolitan Police, are now investigating the incident, as Kido has not yet issued an official statement regarding the claims made by the hackers. In a public showing of their capability, Radiant has shared profiles of ten children to demonstrate the seriousness of their threat, reports India Times.
Cybersecurity expert Jonathon Ellison from the National Cyber Security Centre described the incident as "deeply distressing" due to its implications for child safeguarding and data privacy. Ellison shared that targeting children—who are particularly vulnerable—exemplifies a morally abhorrent strategy employed by cybercriminals, reinforcing the serious nature of these ransomware attacks, as articulated by Reuters and India Times.
The hackers have claimed they had been inside Kido's networks for weeks and are now threatening to publish more data unless their ransom is met. They announced intentions to release additional profiles and private data related to employees, escalating the situation, as detailed by BBC and Reuters. The use of a "Data Leakage Roadmap" posted by the hackers highlights the systematic approach they are taking to extort money, prompting urgent concerns among parents and authorities alike.