Hackers have claimed to have stolen pictures, names and addresses of thousands of children in a cyber attack on a nursery chain.
The group posted images of children from the Kido nursery chain on the dark web – and are demanding a ransom from the company.
Parents whose children attend a Kido nursery branch told Sky News they had received an email confirming the data incident – and were offered reassurance by the company.
An independent intelligence company confirmed the claims from the hackers, who appear to be threatening to release further details, and those of staff members.
An Information Commissioner’s Office spokesperson said: “Kido International has reported an incident to us and we are assessing the information provided.”
Please use Chrome browser for a more accessible video player
The Met Police said they “received a referral on Thursday, 25 September, following reports of a ransomware attack on a London-based organisation”.
They said enquiries are at the early stages and no arrests have been made.
Sky News has contacted Kido for comment.
Graeme Stewart, a cyber security expert from Check Point Software, described the cyber attack as a “new low”.
He told Sky News’ The UK Tonight With Sarah-Jane Mee: “I’ve been involved in cyber security for 25 years and this is the most depressing day, I think, since I’ve been doing this.
“I’ve seen hundreds, probably thousands of cyber attacks over the years… This is just indefensible. It’s an appalling attack and it just shows frankly a lack of ethics and morals, to go after children’s data”.
Read more:
Man arrested over airports cyber attack
Teenagers charged over cyber attack on TfL
Patient’s death linked to cyber attack on NHS
Toby Lewis, head of threat analysis at cyber security company Darktrace, told Sky News’ that while the style of attack was not new, “what is different is the brazenness and willingness to target children or children settings”.
He told the News Hour with Mark Austin: “It definitely seems we are seeing a different style of group, maybe, certainly one that is less concerned about the ethics of what they’re doing.”
Mr Lewis said the hackers were likely motivated by money, adding: “Essentially, it seems they’re trying to get parents to pay up so that their children’s photos are taken offline. It’s a money-making scheme, fundamentally”.
Recent high-profile victims of cyber criminals in the UK include retail giant Marks and Spencer, which lost an estimated £300m in a ransomware attack earlier this year.
Meanwhile, the government has been urged to step in this week to support suppliers affected by a cyber attack on Jaguar Land Rover, after the car-making firm was forced to halt production at the end of August.
