The UK has been shaken by a disturbing new cyber attack targeting nursery children’s data. Hackers calling themselves Radiant have breached systems used by Kido nurseries, exposing highly sensitive information about children, parents, and staff — and threatening to release even more unless a ransom is paid.

This incident highlights a terrifying new trend: cyber criminals moving beyond financial and corporate data to target some of the most vulnerable members of society.

What Happened in the Kido Nursery Hack?

Hackers accessed data from a third-party childcare management platform, Famly, which Kido uses to manage enrolment and parent communications.

The attackers:

• Posted profiles of 20 children online, including names, dates of birth, addresses, photos, and family details.

• Leaked the personal data of dozens of employees such as names, home addresses, National Insurance numbers, and contact information.

• Took the unprecedented step of calling parents directly, threatening to publish more children’s information unless Kido agreed to pay.

While Kido has yet to comment publicly, it is working with the Metropolitan Police and the National Cyber Security Centre (NCSC).

Expert Reactions

Former NCSC chief Ciaran Martin condemned the hackers’ actions as “absolutely horrible” but urged calm, stressing that the risk of physical harm to children is extremely low.

Famly, the software provider, said its infrastructure was not breached and that no other nurseries using its platform were affected. Chief executive Anders Laustsen called the incident:

“A truly barbaric new low, with bad actors trying to expose our youngest children’s data to make a quick buck.”

Parents React to the Breach

For many families, the impact has been distressing:

• One mother told the BBC she received a threatening phone call from the hackers demanding action.

• Another parent described the possibility of children’s details appearing on the dark web as “concerning and alarming.”

• Others expressed sympathy for nursery staff, recognising that frontline employees are not to blame but are dealing with the fallout.

Why This Attack Is Different

While ransomware groups typically target businesses and governments, it is extremely rare for hackers to directly contact individual victims. This tactic highlights both the desperation of the attackers and the growing boldness of cyber criminals.

The hackers admitted to journalists:

“We do it for money, not for anything other than money… This isn’t my first time and will not be my last.”

They later deleted their accounts, suggesting they were spooked by the level of media and law enforcement attention.

The Bigger Lesson for Education and Childcare Providers

This attack is a wake-up call for schools, nurseries, and childcare organisations. Sensitive data — especially relating to children — is a prime target for cyber criminals. The consequences of a breach are not just financial, but emotional and reputational.

Key takeaways for education providers:

• 🔒 Data Protection: Encrypt sensitive data and ensure secure storage of personal records.

• 🛡️ Third-Party Risk Management: Regularly audit the platforms and software providers you rely on.

• 📢 Crisis Response Planning: Have clear communication strategies for parents and staff in case of a breach.

• 🚨 Incident Detection & Monitoring: Proactive IT monitoring can identify and stop threats before data is stolen.

• 👩‍🏫 Staff & Parent Awareness: Training is essential to help people recognise phishing, scams, and unusual activity.

How CSLN Group Can Help

At CSLN Group, we provide cybersecurity solutions for schools, nurseries, colleges, and SMEs. From data protection and compliance to managed IT security services, we help organisations safeguard sensitive information and build resilience against ransomware and data breaches.

Whether you manage a nursery, an academy trust, or a growing business, our team can support you with:

• ✅ Proactive monitoring and 24/7 protection

• ✅ Cloud security and compliance with ICO standards

• ✅ Incident response and recovery planning

• ✅ Tailored IT support for the education sector

Protect What Matters Most

The Kido nursery hack is a stark reminder that cyber criminals will target anyone — even the youngest in our society — to make money.

📞 Contact CSLN Group today to book a free consultation and learn how we can help your organisation strengthen its cybersecurity, IT systems, and data protection.