Hackers threaten parents: Get nursery to pay ransom or we leak your child’s data

Hackers calling themselves Radiant claim they stole sensitive data relating to around 8,000 children from nursery chain Kido, which operates in the UK, US, China and India. The stolen information purportedly includes names, photos, addresses, dates of birth and details about parents or carers, along with safeguarding notes and medical information.

To prove their possession, they posted samples—pictures and profiles of ten children—on their darknet site and then issued a ransom demand, threatening further data releases if payment isn’t made. When contacted by the BBC about the extortion, the group defended their actions, claiming to deserve some compensation for their pentest. The BBC also reported that the group called some of the children’s parents to pressure the nursery to pay, or they would leak the data.

Kido has not issued a public statement, and while the investigation continues, it has contacted parents to confirm the incident and offer reassurance. According to the BBC, the incident highlights ongoing concerns about data privacy and extortion.