Kido nursery data breach exposes 8,000 children’s personal information

Over the past few years, data breaches targeting schools, health care providers and child care services have made headlines, exposing sensitive personal information and leaving families vulnerable. Now it has become known about a new hack targeting a network of nurseries. Kido, which operates in the US, UK, China and India, has reportedly stolen the sensitive data of thousands of children. Names, photographs, addresses, dates of birth, parental details and even records and medical records were allegedly accessed hacker group called Radiant.

Subscribe to my FREE CyberGuy Report
Get my best tech tips, breaking security alerts, and exclusive offers straight to your inbox. Plus, you'll get instant access to my Ultimate Scam Survival Guide – free when you join my CyberGuy.com/Newsletter

What you need to know about hacking a kindergarten

The hacking group Radiant reportedly claims to have stolen data related to approximately 8,000 children. To prove ownership, they posted samples, including photographs and profiles of ten children, on a darknet site. They then demanded a ransom, threatening to reveal more sensitive information if Kido did not pay. In addition to directly targeting the daycare chain, Radiant reportedly called some of the children's parents, pressuring them to force Kido to pay the ransom.

FBI WARNING OF NEW PRIVACY FRAUD

When questioned about their actions, the group defended their tactics as a form of “penetration testing” for which they presumably deserved compensation. This defense is misleading because such testing requires explicit permission from the target organization or participation in a formal bug bounty program. Without such consent, these actions are illegal and deeply unethical.

Why is this attack so disturbing?

Kido violation is alarming for several reasons. Firstly, we are talking about children's data, which in most countries is especially sensitive and protected by law. Second, the attackers combined traditional data theft with intimidation tactics by targeting parents directly. History shows that once criminals gain access to such information, attacks can intensify.

Such breaches highlight how personal and digital security are intertwined. Potential data abuse goes beyond simple identity theft. This can impact children's safety, family privacy and long-term well-being. Since attackers use both stolen data and psychological pressure on parents, the threat becomes especially powerful and long-lasting.

7 steps parents can take to protect their child's data

While the investigation into the Kido hack continues, parents and schools can take immediate steps to protect children's data and reduce the risk of further exploitation. Here is the detailed guide:

1) Check your child's online accounts regularly.

Sign in to email, school portals, and cloud storage accounts associated with your child. Look for unusual activity, such as unrecognized logins, password changes, or new connected devices. If possible, set up account activity notifications so that you are instantly alerted if anything suspicious happens.

2) Enable two-factor authentication (2FA) for all accounts.

Addition 2FA creates an additional level of security. Even if a hacker has the password, they will not be able to access the account without a second step of verification. Most email providers, school portals and messaging platforms support this, and it's a simple step that greatly improves security.

3) Consider using a personal data deletion service.

Data broker sites often collect names, addresses and other data. personal data that hackers can use. Services that remove your child's information from these databases can make it more difficult for criminals to find and use sensitive data.

While no service can guarantee complete removal of your data from the internet, a data removal service is indeed a smart choice. They don't come cheap, and neither does your privacy. These services do all the work for you, actively monitoring and systematically removing your personal information from hundreds of websites. This is what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk that scammers will link leaked data to information they can find on the dark web, making it harder for them to target you.

Check out my top data removal services and get a free scan to see if your personal information has already been published online by visiting CyberGuy.com/Delete

Get a free scan to see if your personal information has already been published online: CyberGuy.com/FreeScan

DO YOU THINK YOU'RE SAFE? IDENTITY THEFT CAN DESTROY YOUR LIFE'S SAVINGS

4) Use identity theft protection services.

These services can continuously scan your child's personal information online and alert you if their details appear on suspicious websites or the dark web. This early warning allows you to take action before criminals try to take advantage of it.

Identity theft companies can track personal information such as your Social Security Number (SSN), phone number, and email address and alert you if it is sold on the dark web or used to open an account. They can also help you freeze your bank and credit card accounts to prevent further unauthorized use by criminals.

Check out my tips and best practices on how to protect yourself from identity theft at CyberGuy.com/IdentityTheft

5) Install antivirus software on all devices.

A powerful antivirus program protects devices from malware, phishing and suspicious scripts. This is especially important for devices that children use to access school portals or personal accounts. This ensures that if a hacker tries to use malware to gain deeper access, it will be blocked.

The best way to protect yourself from malicious links that install malware and potentially access your personal information is to install powerful antivirus software on all your devices. This protection can also alert you to phishing emails and ransomware, keeping your personal information and digital assets safe.

Get my picks for 2025's top antivirus protection winners for your Windows, Mac, Android, and iOS devices at CyberGuy.com/LockUpYourTech

6) Use a secure email provider for confidential messages.

To communicate with schools, health care providers, or other services that handle sensitive information about children, consider using an email service that offers strong encryption and built-in spoofing protection. This makes it more difficult for attackers to impersonate a school or parent.

For recommendations on private and secure email providers offering aliases, see CyberGuy.com/Mail

7) Teach your children about internet safety.

Teach children not to share personal information online, including photos, addresses, or school information. Encourage them to report anything suspicious and explain why it is important to keep their login information confidential.

CLICK HERE TO GET THE FOX NEWS APP

Kurt's Key Takeaway

Data breaches targeting children are particularly concerning because they can have long-lasting consequences. The Kido incident is a stark reminder of the importance of preventive digital safety measures for families. Although organizations are responsible for protecting sensitive data, parents can take important steps to monitor, secure and respond to potential threats.

Have you ever checked what personal information about your child is online? Let us know by writing to us at CyberGuy.com/Contact

Subscribe to my FREE CyberGuy Report
Get my best tech tips, breaking security alerts, and exclusive offers straight to your inbox. Plus, you'll get instant access to my Ultimate Scam Survival Guide – free when you join my CyberGuy.com/Newsletter

Copyright CyberGuy.com 2025. All rights reserved.