Two 17-year-old boys have been arrested in connection with a major cyberattack targeting a chain of nurseries across Greater London. The teenagers are being held on suspicion of computer misuse and blackmail and remain in custody as police continue their investigation.
During the intrusion, which occurred in September, the attackers stole sensitive personal data belonging to approximately 8,000 children enrolled at Kido, a nursery group operating 18 locations in London. Stolen information included names, photographs, and home addresses.
The hackers then posted the profiles of 10 children online and threatened to release more unless a ransom was paid.
Kido informed parents that the data breach stemmed from a breach of Famly, a widely used nursery management platform that enables nurseries to share updates and images with families.
The Metropolitan Police have confirmed that inquiries are ongoing, and efforts are underway to ensure the stolen data is removed from the internet and further breaches are prevented.
Kido and Famly have said they are cooperating fully with authorities and reviewing their security protocols.
