{“lastseen”:”2025-09-26T18:49:55″,”description”:”Just when you think extortionists can\u2019t sink any lower, along comes a lowlife that manages to surprise you.\\n\\nThe BBC reported that a group calling itself \\”Radiant\\” claims to have stolen sensitive data related to around 8,000 children from nursery chain Kido, which operates in the UK, US, China, and India.\\n\\nThe data the group says it stole includes names, photos, addresses, dates of birth, and details about their parents or carers. The hack also reportedly exposed safeguarding notes and medical information.\\n\\nTo prove their possession of the data, the criminals posted samples, including pictures and profiles of ten children on their darknet website. They then issued a ransom demand to Kido, threatening to release more sensitive data unless they were paid.\\n\\nWhen contacted by the BBC about their extortion attempt, the group defended their actions, claiming to: \\n\\n\\u003e \\”\u2026 deserve some compensation for our pentest.\\”\\n\\nThey should educate themselves before continuing. In most jurisdictions, to carry out this type of \u201cpenetration testing\u201d legally, they need to get explicit permission from the company first (or choose a company that runs a bug bounty program). \\n\\nAs if stealing children\u2019s data and publishing them on the dark web isn’t bad enough, Joe Tidy at the BBC reported that the group also called some of the children\u2019s parents\u2014telling them to put pressure on the nursery chain to pay the ransom demand, or they’ll leak their child’s data. \\n\\nIf history has taught us anything, the next step is that they will try to extort the parents individually, as happened in the case of the Finnish psychotherapy practice Vastaamo. Trust me, these things never end well. In Vastaamo’s case, the clinic went bankrupt, at least one suicide has been linked to the case, and the attackers have been sentenced to jail time.\\n\\nKido has not issued a public statement. Although the investigation is ongoing, it has contacted parents to confirm the incident and offer reassurance.\\n\\n## Protecting yourself after a data breach\\n\\nThere are some actions you can take if you are, or suspect you may have been, the victim of a data breach.\\n\\n * **Check the vendor\u2019s advice.** Every breach is different, so check with the vendor to find out what\u2019s happened and follow any specific advice it offers.\\n * **Change your password.** You can make a stolen password useless to thieves by changing it. Choose a strong password that you don\u2019t use for anything else. Better yet, let a password manager choose one for you.\\n * **Enabletwo-factor authentication**(****2FA)**.** If you can, use a FIDO2-compliant hardware key, laptop or phone as your second factor. Some forms of 2FA can be phished just as easily as a password, but 2FA that relies on a FIDO2 device can\u2019t be phished.\\n * **Watch out for fake vendors.** The thieves may contact you posing as the vendor. Check the company’s website to see if it’s contacting victims and verify the identity of anyone who contacts you using a different communication channel.\\n * **Take your time.** Phishing attacks often impersonate people or brands you know, and use themes that require urgent attention, such as missed deliveries, account suspensions, and security alerts.\\n * **Consider not storing your card details**. It\u2019s definitely more convenient to get sites to remember your card details for you, but we highly recommend not storing that information on websites.\\n * **Set upidentity monitoring**, which alerts you if your personal information is found being traded illegally online and helps you recover after.\\n\\n\\n\\n* * *\\n\\n**We don ‘t just report on data privacy\u2014we help you remove your personal information**\\n\\nCybersecurity risks should never spread beyond a headline. With Malwarebytes Personal Data Remover, you can scan to find out which sites are exposing your personal information, and then delete that sensitive data from the internet.”,”published”:”2025-09-26T16:38:42″,”modified”:”2025-09-26T16:38:42″,”type”:”malwarebytes”,”title”:”Hackers threaten parents: Get nursery to pay ransom or we leak your child\\u0026#8217;s data”,”source”:””,”references”:””,”id”:”MALWAREBYTES:8888CCEB38DB6CEBDA4B2AAD73448E32″,”bulletinFamily”:”blog”,”cwe”:null,”cvelist”:[],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.malwarebytes.com\/blog\/news\/2025\/09\/hackers-threaten-parents-get-nursery-to-pay-ransom-or-we-leak-your-childs-data”,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-09-26T18:49:55″,”description”:”Just when you think extortionists can\u2019t sink any lower, along comes a lowlife that manages to surprise you.\\n\\nThe BBC reported that a group calling itself…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,12,115,13,33,7,11,5],"class_list":["post-19322","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-exploit","tag-malwarebytes","tag-news","tag-none","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n