• Vie. Ene 23rd, 2026

Hackers behind nursery cyber attack plan to release more data on children

Michael Bunting

PorMichael Bunting

Sep 26, 2025

Hackers claiming to have stolen pictures, names, and addresses of over 8,000 children in a cyber attack on a nursery chain have informed Sky News that they will release the profiles of more children and employees.

The group, known as Radiant, had posted images of children attending the Kido nursery chain in London on the dark web and demanded a ransom from the company.

So far, the information released has been limited to the personal contact details of children who attend the nurseries, as well as their parents and carers.

Radiant has informed Sky News that they plan to release a new set of data soon, which will include the profiles of 30 additional children and 100 employees.

They stated that the release would contain personal information of employees such as «full names, national insurance numbers, DOBs [date of births], full addresses, employment start date, email addresses, and more.»

The stolen information on the children includes medical records, incident reports, and the dispensation of drugs and medicine given to the children.

The group claims that they typically demand around 1.5% of a company’s yearly revenue as ransom.

Sky News has learned that the group has not received any payment from the Kido nursery group.

Read more from Sky News:
Farage on course to be next PM, mega poll projects
Terror charge against rapper cannot continue, court says

Please use Chrome browser for a more accessible video player

Children’s pictures stolen in nursery cyber attack

Parents whose children attend a Kido nursery branch informed Sky News on Thursday that they had received an email confirming the data incident and had been provided reassurance by the company.

A spokesperson for the Information Commissioner’s Office stated: «Kido International has reported an incident to us and we are assessing the information provided.»

The Metropolitan Police mentioned that they «received a referral on Thursday, 25 September, following reports of a ransomware attack on a London-based organization.»

They mentioned that the investigation is in its early stages and no arrests have been made.

Ciaran Martin, former chief of the National Cyber Security Centre, which is part of the GCHQ spy agency, told Sky News presenter Samantha Washington that he believes the nursery chain should not pay the ransom.

«This data is not coming back. That’s the bit that isn’t reassuring. There is no way of guaranteeing the suppression of this data,» he said, adding that hacking groups often sell the data to other criminals or use it for scams or fraud.

«And even if the nursery pays the ransom, when law enforcement catches up with this group, they’ll find the data – they won’t delete it. They never do.»

Hackers who have claimed to have stolen pictures, names, and addresses of over 8,000 children in a cyber attack on a nursery chain have notified Sky News that they plan to release more profiles of children and employees. The group, identifying itself as Radiant, had posted images of children from the Kido nursery chain in London on the dark web and demanded a ransom from the company. The released information so far has been limited to the personal contact details of children attending the nurseries, as well as their parents and caregivers. Radiant has informed Sky News that they are preparing to release a new set of data, which will include the profiles of 30 additional children and 100 employees. This release will encompass the personal information of the employees, such as full names, national insurance numbers, dates of birth, full addresses, employment start dates, email addresses, and more. The stolen information on the children includes medical records, incident reports, and details of drugs and medication administered to them.

The group mentioned that they typically demand around 1.5% of a company’s annual revenue in ransom. Sky News has learned that Radiant has not received any payment from the Kido nursery group. Parents of children attending a Kido nursery branch informed Sky News on Thursday that they had received an email confirming the data breach and had been provided reassurance by the company. A spokesperson from the Information Commissioner’s Office stated, «Kido International has reported an incident to us, and we are evaluating the information provided.» The Metropolitan Police confirmed that they received a referral following reports of a ransomware attack on a London-based organization. The investigation is in its early stages, and no arrests have been made.

Ciaran Martin, the former chief of the National Cyber Security Centre, which is part of the GCHQ spy agency, expressed to Sky News presenter Samantha Washington that he believes the nursery chain should refrain from paying the ransom. He emphasized, «This data is not recoverable. There is no guarantee of the data being suppressed.» Martin added that hacking groups often sell the data to other criminals or utilize it for scams or fraud. He also highlighted that even if the nursery pays the ransom, the data will likely not be deleted by the hacking group, rendering the payment ineffective.

Recent high-profile cybercrime victims in the UK include retail giant Marks and Spencer, which suffered an estimated loss of £300 million due to a ransomware attack earlier this year. Additionally, the government has been called upon to assist suppliers impacted by a cyber attack on Jaguar Land Rover, as the automotive company had to pause production at the end of August.

In conclusion, cyber attacks continue to pose a significant threat to organizations and individuals, leading to substantial financial losses and compromising sensitive data. It is imperative for businesses to enhance their cybersecurity measures and remain vigilant against potential threats in the evolving digital landscape. Keep the exact anchor texts of the links on

Hackers who claimed to have stolen pictures, names and addresses of over 8,000 children in a cyber attack on a nursery chain have told Sky News they will release the profiles of more children and employees.

The group, calling itself Radiant, had posted images of children attending the Kido nursery chain in London on the dark web and demanded a ransom from the company.

So far, the information released has been restricted to the personal contact details of children who attend the nurseries, as well as their parents and carers.

Radiant has told Sky News they intend to imminently release a new set of data, including the profiles of 30 more children and 100 employees.

It said the release would include the personal information of the employees including «full names, national insurance numbers, DOBs [date of births], full addresses, employment start date, email addresses and more».

The stolen information on the children includes medical records, incident reports and the allocation of drugs and medicine given to the children.

The group claimed it typically demands around 1.5% of a company’s yearly revenue in ransom.

Sky News understands the group has not received any money from the Kido nursery group.

Read more from Sky News:
Farage on course to be next PM, mega poll projects
Terror charge against rapper cannot continue, court says

Please use Chrome browser for a more accessible video player

Children’s pictures stolen in nursery cyber attack

On Thursday, parents whose children attend a Kido nursery branch told Sky News they had received an email confirming the data incident and had been offered reassurance by the company.

An Information Commissioner’s Office spokesperson said: «Kido International has reported an incident to us and we are assessing the information provided.»

The Metropolitan Police said they «received a referral on Thursday, 25 September, following reports of a ransomware attack on a London-based organisation».

They said enquiries are at the early stages and no arrests have been made.

Ciaran Martin, former chief of the National Cyber Security Centre, which is part of the GCHQ spy agency, told Sky News presenter Samantha Washington he believes the nursery chain should not pay the ransom.

«This data is not coming back. That’s the bit that isn’t reassuring. There is no way of guaranteeing the suppression of this data,» he said, adding hacking groups often sell the data on to other criminals or use it for scams or fraud.

«And when law enforcement get to this group, even if the nursery pays the ransom, they’ll find the data – they won’t delete it. They never do. So it won’t achieve anything.»

Recent high-profile victims of cyber criminals in the UK include retail giant Marks and Spencer, which lost an estimated £300m in a ransomware attack earlier this year.

Meanwhile, the government has been urged to step in this week to support suppliers affected by a cyber attack on Jaguar Land Rover, after the car-making firm was forced to halt production at the end of August.

, don’t translate or change.

SOURCE

Michael Bunting

Por Michael Bunting

“I’m Michael Bunting, Communications Director with over 20 years of experience in corporate reputation, crisis management, and digital strategy. I have led teams in multinational companies and agencies, advised executives, and designed high-impact strategies. I am driven by transparency, innovation, and leveraging communication as a competitive advantage.”

Deja una respuesta

Tu dirección de correo electrónico no será publicada. Los campos obligatorios están marcados con *