Kido International Breach Exposes Data of 8,000 Children in London Amid Major Nursery Cyberattack

Imagine this—a daycare is looking after your child. You leave your child in their hands with identifying information and personal information. What would you do if you found out the daycare you were using was hacked, and that information was taken? This is what happened to Kido International, which operates 18 daycare centers across Greater London. According to a report, Kido International breach exposes data of 80000 children in London. Let’s try to understand what really happened.

What Happened?​

According to a hacktivist group called Radiant, they hacked into the systems of Kido and stole data on over 8,000 children. They even posted the data of 10 children online. It's worth noting the data that was stolen contained the following:

• Children’s names
• Children’s photos
• Children’s home addresses
• Parents contact information

In relation to the theft, they even included information related to staff members and threatened to release that information as well.

Who Was Involved?​

• Kido International - Operates child care centers in the UK, U.S., and India.

• Radiant hackers - Claimed they spent weeks inside Kido's systems. Some speculate about associations with Russia, but it has not been confirmed.

• Metropolitan Police Cyber Crime Unit - Leading the investigation.

So far, Kido has not made any public statements regarding the attack.

Why is This Breach Important?​

This was not just about hacked emails or passwords. This was about children’s personal data, which is distinctly different than a password. You can change your email or password, but you cannot change your child’s name or their picture. This is what makes it much more serious.

Kido digital tools are utilized so parents may track their child’s development. Normally, this is a good thing. Now, it has become a vulnerability.

The Larger Issue​

Recently, the UK has experienced some large cyberattacks. Even a large company like Jaguar Land Rover was attacked this year. Now, hackers are focusing on schools and nurseries because they tend to be more vulnerable in terms of technology and security.

What Needs to Happen?​

I think nurseries and schools need to do a better job of protecting children’s data. They should:

• Implement more secure cyber systems.
• Train staff to recognize fake emails and other scams.
• Tell parents if something goes wrong.

When the safety of children is at stake, silence is not an option.