Kiddo Nursery data breach exposes personal information of 8,000 children

Over the past few years, data breaches targeting schools, healthcare providers, and child care services have been making headlines, exposing sensitive personal information and leaving families vulnerable. Now, a new hack targeting the custody chain has been revealed. Kido, which operates in the US, UK, China and India, is said to have stolen sensitive data from thousands of children. Names, photos, addresses, dates of birth, parental details and even security notes and medical records were allegedly accessed by a hacker group called Radiant.

Sign up for my free CyberGuy report
Get the best tech tips, breaking security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – for free when you join my site CyberGuy.com/Newsletter

What you need to know about breach of custody

According to reports, hacking group Radiant claims to have stolen data related to around 8,000 children. To prove possession, they posted samples, including photos and profiles of ten children, on the dark web. They then issued a ransom demand, threatening to release more sensitive information unless Kido paid. In addition to targeting the custody chain directly, Radiant reportedly contacted some of the children’s parents, pressuring them to make Kido pay the ransom.

FBI warns of new extortion scams targeting sensitive data

When asked about their actions, the group defended their tactics as a form of “penetration testing” for which they supposedly deserved compensation. This defense is misguided, as such testing would require explicit permission from the target organization or participation in a formal bug bounty program. Without this consent, these actions become illegal and completely unethical.

Why is this attack so annoying?

The Kido hack is concerning for multiple reasons. First, it concerns children’s data, which is particularly sensitive and legally protected in most countries. Second, the attackers combined traditional data theft with intimidation tactics, contacting parents directly. History suggests that once criminals gain access to this information, attacks can escalate.

Breaches like these highlight how intertwined personal and digital security are. The potential misuse of data extends beyond just identity theft. It can affect children’s safety, family privacy and long-term well-being. With attackers taking advantage of stolen data and psychological pressure on parents, the threat has become particularly strong and long-lasting.

7 steps parents can take to protect their children’s data

Although the investigation into the Kido breach is ongoing, parents and schools can take immediate action to protect children’s data and reduce the risk of further exploitation. Here is a detailed guide:

1) Monitor your child’s online accounts regularly

Log in to your child’s email, school portals, and cloud storage accounts. Look for any unusual activity such as unknown logins, password changes, or new connected devices. Set up notifications for account activity whenever possible so you’re immediately alerted if something suspicious happens.

2) Enable two-factor authentication (2FA) on all accounts

addition 2FA Creates an extra layer of security. Even if a hacker has a password, they won’t be able to access the account without a second verification step. Most email providers, school portals, and messaging platforms support this, and it’s a simple step that dramatically improves security.

3) Consider a personal data removal service

Data broker sites often collect names, addresses, and other personal details that hackers can use. Services that remove your child’s information from these databases can make it more difficult for attackers to find and exploit sensitive data.

While no service can guarantee complete removal of your data from the Internet, a data removal service is truly a smart choice. It’s not cheap, and neither is your privacy. These services do all the work for you by systematically monitoring and scraping your personal information from hundreds of websites. This gives me peace of mind and has proven to be the most effective way to clear your personal data from the Internet. By limiting the information available, you reduce the risk of fraudsters cross-referencing data from breaches to information they might find on the dark web, making it harder for them to target you.

Check out my top picks for data removal services and get a free check to see if your personal information really exists on the web by visiting CyberGuy.com/Delete

Get a free check to see if your personal information is already on the web: CyberGuy.com/FreeScan

Do you think you are safe? Identity theft can wipe out your entire life’s savings

4) Use identity theft protection services

These services can continuously search for your child’s personal information online and alert you if their data appears on suspicious websites or on the dark web. This early warning allows you to take action before criminals try to exploit it.

Identity theft companies can monitor personal information such as your Social Security number (SSN), phone number, and email address, and alert you if it is sold on the dark web or used to open an account. They can also help you freeze your bank and credit card accounts to prevent further unauthorized use by criminals.

Check out my tips and top picks on how to protect yourself from identity theft at CyberGuy.com/IdentityTheft

5) Install antivirus software on all devices

Powerful antivirus software protects devices from malware, phishing, and suspicious scripts. This is especially important on devices that children use to access school portals or personal accounts. This ensures that if a hacker tries to use malware to gain deeper access, they will be blocked.

The best way to protect yourself from malicious links that install malware, and potentially access your private information, is to install strong antivirus software on all your devices. This protection can also alert you to phishing emails and ransomware, keeping your personal information and digital assets safe.

Get my picks for the best antivirus protection winners of 2025 for Windows, Mac, Android, and iOS at CyberGuy.com/LockUpYourTech

6) Use a secure mail provider for sensitive communications

To communicate with schools, healthcare providers, or any service that handles sensitive information about children, consider using an email service that offers strong encryption and built-in anti-spoofing protection. This makes it difficult for attackers to impersonate a school or parent.

For recommendations on private and secure email providers that offer aliases, visit CyberGuy.com/Mail

7) Educate your children about online safety

Teach children not to share personal information online, including photos, addresses or school details. Encourage them to report anything suspicious and explain why it’s important to keep their login information private.

CLICK HERE TO GET THE FOX NEWS APP

Key takeaway for Kurt

Data breaches targeting children are particularly concerning because they can have long-lasting consequences. The Kiddo incident is a stark reminder of the importance of proactive digital security measures for families. While organizations have a responsibility to protect sensitive data, parents can take important steps to monitor, secure, and respond to potential threats.

Have you ever reviewed your child’s personal information online? Let us know by writing to us at CyberGuy.com/Contact

Sign up for my free CyberGuy report
Get the best tech tips, breaking security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – for free when you join my site CyberGuy.com/Newsletter

Copyright 2025 CyberGuy.com. All rights reserved.