Hackers Target London Nurseries, Exposing Child Data
- Cybercriminals breached Kido International’s systems, leaking sensitive data on thousands of children and escalating concerns over digital safety.
A ransomware group known as Radiant has claimed responsibility for a cyberattack on Kido International, a childcare provider operating 18 nurseries across Greater London. According to a post on the group’s dark web portal, personal data of over 8,000 children was stolen, including names, photographs, addresses, and family contact details. To support their claim, the hackers published information on ten children and threatened to release more profiles, including those of 100 employees. Kido International has not issued a public response to inquiries about the breach.
Security Breach and Ransomware Threats
The attackers stated they had maintained access to Kido’s internal systems for several weeks before revealing the breach. Although they claimed to be based in Russia, no evidence was provided to verify their location. Ransomware, the method used in this attack, typically involves encrypting a victim’s data and demanding payment for its release. In this case, the hackers declined to disclose the ransom amount sought from Kido International.
Broader Impact Across UK Infrastructure
This incident adds to a growing list of ransomware attacks affecting British institutions in 2025. Jaguar Land Rover’s suppliers are still recovering from a cyberattack that halted operations, prompting government discussions about financial aid. Collins Aerospace, a subsidiary of RTX, was also targeted, disrupting check-in systems at Heathrow and other European airports. Earlier this year, Marks & Spencer suffered a major breach that disabled its online ordering system, with projected losses reaching £300 million.
National Response and Ethical Concerns
Jonathon Ellison of the UK’s National Cyber Security Centre condemned the attack, emphasizing the severity of targeting childcare providers. He noted that cybercriminals pursue any organization they believe can yield financial gain, regardless of the ethical implications. The British government continues to monitor ransomware activity and has made arrests in connection with recent attacks. As threats evolve, institutions handling sensitive data—especially involving children—face mounting pressure to strengthen their cybersecurity defenses.
Ransomware’s Shift Toward Vulnerable Sectors
The targeting of nurseries marks a troubling shift in ransomware strategy, where attackers increasingly focus on sectors with limited IT resources but high emotional stakes. Experts warn that such tactics may become more common, as cybercriminals seek leverage through public outrage and urgency. The Radiant group’s decision to leak child data underscores the need for stricter data protection laws and rapid incident response protocols. This breach may prompt broader reforms in how educational and childcare institutions manage digital security.
