Hackers claim to have stolen the names, pictures, and addresses of approximately 8,000 children from the Kido nursery chain. Kido operates 18 sites in and around London, with additional locations abroad.
It operates 39 nurseries across India, additional locations in China, and nine sites in the US, six in Houston, two in Austin, and one in Chicago, as per the Daily Mail.
The cybercriminals are reportedly using the sensitive data, which also includes information about the children’s parents, carers, and safeguarding notes, to demand a ransom.
Cybersecurity firm Check Point described the targeting of nurseries as "an absolute new low."
The cybercriminals reached out to the BBC regarding the hack and have since posted details on their darknet website.
They shared a sample of the stolen data, including pictures and profiles of 10 children. The release is part of their attempt to extort money from the nursery chain, which operates 18 locations, primarily in the London area.
When asked if they felt any remorse for extorting a nursery using children’s data, the hackers responded that they "weren't asking for an enormous amount" and that they "deserve some compensation for our pentest," as reported by the BBC.
A "pentest," or penetration test, refers to when ethical hackers are hired to evaluate an organization’s security in a controlled and professional manner.
The company has not publicly confirmed the hackers’ claims or issued a statement regarding the incident.
Jonathon Ellison from the National Cyber Security Centre called the hack "deeply distressing."
It operates 39 nurseries across India, additional locations in China, and nine sites in the US, six in Houston, two in Austin, and one in Chicago, as per the Daily Mail.
The cybercriminals are reportedly using the sensitive data, which also includes information about the children’s parents, carers, and safeguarding notes, to demand a ransom.
Cybersecurity firm Check Point described the targeting of nurseries as "an absolute new low."
The cybercriminals reached out to the BBC regarding the hack and have since posted details on their darknet website.
They shared a sample of the stolen data, including pictures and profiles of 10 children. The release is part of their attempt to extort money from the nursery chain, which operates 18 locations, primarily in the London area.
When asked if they felt any remorse for extorting a nursery using children’s data, the hackers responded that they "weren't asking for an enormous amount" and that they "deserve some compensation for our pentest," as reported by the BBC.
A "pentest," or penetration test, refers to when ethical hackers are hired to evaluate an organization’s security in a controlled and professional manner.
The company has not publicly confirmed the hackers’ claims or issued a statement regarding the incident.
Jonathon Ellison from the National Cyber Security Centre called the hack "deeply distressing."
You may also like
'A monster': Arizona man convicted of killing eight in deadly 2017 spree; motive still unclear
Strictly Come Dancing live show first look as Dianne Buswell shows off baby bump
People are just realising there's a hidden 'godsend' button on windows for easier cleaning
I read every day - these are the 10 best new romantasy books to read this autumn
Donald Trump's incorrect autism comments 'pose a risk to patient safety in UK'