Full Breakdown
Arrests Made in Cyber-Attack on Kido Nursery Chain
10/8/2025, 12:35:02 AM
Overview of the Incident
On October 7, 2025, a 17-year-old boy and a 22-year-old man were arrested by the Metropolitan Police in connection with a cyber-attack on the Kido nursery chain, which operates 18 sites in Greater London and additional locations in India and the United States. The attack involved the theft of personal data, including photographs, names, and addresses of approximately 8,000 children, prompting concerns among parents and caregivers.
Details of the Cyber-Attack
The cyber-attack was reported to the Metropolitan Police following a referral from Action Fraud on September 25, 2025. Hackers allegedly accessed sensitive information hosted by Famly, a software service used by Kido to share data with parents. The attackers threatened to release the profiles of more children unless a ransom was paid. Initial reports indicated that the hackers had already posted the profiles of 10 children online.
Arrests and Investigation
The arrests occurred during a police operation at residential properties in Bishop's Stortford, Hertfordshire. Both suspects remain in custody for questioning on charges of computer misuse and blackmail. Will Lyne, the head of economic and cybercrime at the Metropolitan Police, emphasized the seriousness of the incident, stating that investigators have been working diligently to identify those responsible.
Official Statements & Responses
Kido has communicated with parents regarding the breach, assuring them that the incident is being taken seriously. Anders Laustsen, CEO of Famly, confirmed that their security infrastructure was not breached, indicating that the attack was directed at Kido's data rather than Famly's systems. Will Lyne reiterated the police's commitment to addressing the concerns of affected families, stating, "We understand reports of this nature can cause considerable concern, especially to those parents and carers who may be worried about the impact of such an incident on them and their families."
Criticism & Opposition
The hacking group, reportedly named Radiant, has faced backlash for targeting children. They initially claimed that their actions were a form of "pentesting," or ethical hacking, to assess Kido's security. However, this justification has been met with criticism, particularly given the sensitive nature of the data involved.
Conflicting Reports & Gaps
While the police confirmed the arrests and the nature of the cyber-attack, there are discrepancies regarding the hackers' claims. Some reports suggest that the hackers had contacted parents directly to extort money, while others indicate that they had deleted the data from their extortion website following public outcry.
What's Next
The Metropolitan Police's investigation is ongoing, with efforts to ensure that those responsible for the cyber-attack are brought to justice. The situation remains fluid, and further developments are anticipated as the inquiry progresses.
