London Nursery chain cyberattack happens, and children’s data is compromised; two suspects have been arrested.

Story Highlights

• Hackers stole personal data, including photos, names, and addresses, of 8,000 children from the Kido nursery chain in London.
• A ransom of £600,000 in Bitcoin was demanded; upon refusal, some children’s data was leaked on the Dark Web.
• Metropolitan Police have arrested two 17-year-olds in connection with the cyberattack.
• The incident highlights the increasing targeting of minors’ data for financial extortion.

Report on Kido Nursery Chain Cyberattack

The Kido nursery chain experienced a cyberattack that resulted in the compromise of sensitive information belonging to approximately 8,000 children. The breach involved data such as photographs, home addresses, and family contact details. Individuals operating under the alias “Radiant” demanded a £600,000 Bitcoin payment.

Two suspects, aged 17 and 22, have been arrested in the UK on cyberblackmail charges.

They're alleged to be responsible for a digital break-in at a chain of nursery schools (kindergartens) in London, and publishing children's images to squeeze for payment. pic.twitter.com/TUreEEoIVY

— Paul Ducklin (@duckblog) October 7, 2025

Following Kido’s refusal to pay the ransom, some of the stolen data, including children’s photos and personal profiles, was published on Dark Web platforms. The individuals responsible for the attack contacted BBC’s cybersecurity desk on September 22, 2025, seeking media attention.

The Metropolitan Police launched an investigation after Kido reported the ransomware attack to Action Fraud on September 25, 2025. The Met’s Cyber Crime Unit led the response. On October 7, 2025, police arrested two 17-year-olds in Bishop’s Stortford, Hertfordshire, on suspicion of computer misuse and blackmail.

The incident has raised concerns regarding data protection practices within childcare institutions and the potential for youth involvement in cybercrime. While the individuals responsible for the attack claimed on October 2, 2025, to have deleted the stolen data and issued an apology, authorities have not independently verified this claim.

Watch the report: 8,000 Children’s info stolen!! | Kido Nursery Data Breach – YouTube

Sources:

Kido Nursery Cyber Attack: Arrests
Met Police Arrest Teenagers in Kido Nursery Ransomware Attack