The UK's National Cyber Security Centre (NCSC) has started an investigation into a cyberattack described by security experts as the lowest of the low, hackers have stolen the personal data of more than 8,000 children from a UK nursery chain and are now holding it for ransom.
The breach targeted Kido, a nursery group with locations across London, compromising highly sensitive information including children's photos, names, and home addresses.
Cyber-criminals have already published a portion of the stolen data on the dark web to pressure the company into paying, according to British media reports.
The London Metropolitan Police confirmed its Cyber Crime Unit has launched an investigation after receiving a report of a ransomware attack on Thursday, September 25, 2025.
“Children are completely innocent victims.They are kids, their personal details shouldn’t be worth anything, You are probably prepared to go a little bit further to protect children’s privacy,” Bryony Wilde, whose child attends a Kido nursery expressed as BBC reported.
The National Cyber Security Centre (NCSC) described the incident as deeply distressing.
Jonathon Ellison, NCSC director for national resilience, condemned the act and stated: “Cyber criminals will target anyone if they think there is money to be made, and going after those who look after children is a particularly egregious act.”
Security researchers warn that the stolen data is particularly dangerous. Mantas Sabeckis, a researcher at Cybernews, explained that this type of information could enable stalking, harassment, or even targeting families who might already be vulnerable.
The attack points towards the vulnerability of essential services, including educational and childcare institutions, to cybercrime. It echoes a growing trend of hackers targeting hospitals, schools, and now nurseries.
