The cyber attack on Kido’s nursery was first brought to the BBC’s attention on 22 September when hackers calling themselves Radiant attempted to get press attention for a data theft as part of their attempts to extort the nursery chain for around £600,000 in Bitcoin.
The BBC did not report on the breach until the hackers began posting images and profiles of some of the children on their darknet site on 25 September in what cyber experts described as a “new low” in cyber crime.
The stolen data included names, addresses and pictures of children along with contact details for parents and carers.
The hackers called parents directly about their hack to pressure Kido into paying the ransom to have the data deleted. More children’s profiles were added taking the total to 20.
In an unusual move the hackers then blurred the images as they were concerned about their reputation with other hacking groups.
Then on 2 October they removed all the stolen data and pictures from their darknet site and claimed to have deleted all 8,000 children’s’ files. “No more remains and this can comfort parents,” they said.
A spokesperson for Kido had confirmed the company had “identified and responded to a cyber incident” and worked with external specialists to investigate and determine what happened.
They added: “We swiftly informed both our families and the relevant authorities.”
The Met Police initially said a 22-year-old man had been arrested, but has clarified that the age is 17.
