Hackers leak children’s data in major daycare breach

In recent years, data breaches targeting schools, healthcare providers, and child care services have made headlines, exposing sensitive personal information and leaving families vulnerable. Now, a new violation targeting a daycare chain has come to light. Kido, which operates in the US, UK, China and India, has reportedly had sensitive data of thousands of children stolen. A hacking group called Radiant allegedly accessed names, photographs, addresses, dates of birth, parental details and even protection notes and medical records.

Sign up to receive my FREE CyberGuy report
Get my best tech tips, urgent security alerts, and exclusive offers delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Guide to Surviving Scams, free when you join me CyberGuy.com/Newsletter

What you need to know about daycare non-compliance

Hacker group Radiant reportedly claims to have stolen data from around 8,000 children. To prove possession, they posted samples, including photographs and profiles of ten children, on a dark web website. They then demanded a ransom, threatening to reveal more sensitive information unless Kido paid. In addition to directly targeting the daycare chain, Radiant allegedly called some of the children’s parents and pressured them to pressure Kido into paying the ransom.

FBI warns of new extortion scam targeting sensitive data

When questioned about their actions, the group defended their tactics as a form of “penetration testing” for which they supposedly deserved compensation. This defense is misleading, as such tests require explicit permission from the targeted organization or participation in an official bug bounty program. Without that consent, these actions are illegal and deeply unethical.

Why is this attack so worrying?

Kido’s rape is alarming for multiple reasons. First of all, this is children’s data, which is particularly sensitive and legally protected in most countries. Second, the attackers combined traditional data theft with intimidation tactics, targeting parents directly. History suggests that once criminals gain access to such information, attacks can escalate.

Breaches like this highlight how personal and digital security are intertwined. The potential misuse of data goes beyond simple identity theft. It can affect children’s safety, family privacy and long-term well-being. Because attackers leverage both stolen data and psychological pressure on parents, the threat is particularly potent and long-lasting.

7 steps parents can take to protect their children’s data

Although the investigation into the Kido breach is ongoing, parents and schools can take immediate steps to protect children’s data and reduce the risk of further exploitation. Here is a detailed guide:

1) Monitor your child’s online accounts regularly

Sign in to email, school portals, and cloud storage accounts linked to your child. Look for unusual activity, such as unrecognized logins, password changes, or new connected devices. Set up notifications for account activity whenever possible to receive instant alerts if something suspicious happens.

2) Enable two-factor authentication (2FA) on all accounts

adding 2FA creates an additional layer of security. Even if a hacker has a password, they won’t be able to access the account without the second verification step. Most email providers, school portals, and messaging platforms support it, and it’s a simple step that dramatically improves security.

3) Consider a personal data removal service

Data broker sites often collect names, addresses, and other personal data that hackers can use. Services that remove your child’s information from these databases can make it difficult for attackers to find and exploit sensitive data.

While no service can guarantee complete removal of your data from the Internet, a data deletion service is truly a smart choice. They are not cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically deleting your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to delete your personal data from the Internet. By limiting the information available, you reduce the risk of scammers cross-referencing leak data with information they can find on the dark web, making it harder for them to target you.

DO YOU THINK YOU ARE SAFE? IDENTITY THEFT COULD ELIMINATE ALL YOUR LIFE SAVINGS

4) Use identity theft protection services

These services can continually search for your child’s personal information online and alert you if their data appears on suspicious websites or the dark web. This early warning allows you to take action before criminals try to take advantage.

Identity theft companies can monitor personal information such as your social security number (SSN), phone number, and email address, and alert you if it is sold on the dark web or used to open an account. They can also help you freeze your bank and credit card accounts to prevent further unauthorized use by criminals.

See my tips and best options on how to protect yourself from identity theft at CyberGuy.com/IdentityTheft

5) Install antivirus software on all devices

A powerful antivirus program protects devices against malware, phishing scams, and suspicious scripts. It is particularly important on devices that children use to access school portals or personal accounts. This ensures that if a hacker tries to use malware to gain deeper access, they will be blocked.

The best way to protect yourself from malicious links that install malware and potentially access your private information is to have powerful antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.

Get my picks for the best antivirus protection winners of 2025 for your Windows, Mac, Android, and iOS devices at CyberGuy.com/LockUpYourTech

6) Use a secure email provider for confidential communications

For communications with schools, healthcare providers, or any service that handles sensitive information about children, consider using an email service that offers strong encryption and built-in spoofing protection. This makes it more difficult for attackers to impersonate a school or parent.

For recommendations on private, secure email providers that offer alias addresses, visit CyberGuy.com/Mail

7) Educate your children about online safety

Teach children not to share personal information online, including photos, addresses or school details. Encourage them to report anything suspicious and explain why it’s important to keep login information private.

CLICK HERE TO GET THE News APP

Kurt’s Key Takeaway

Data breaches targeting children are particularly concerning because they can have long-lasting consequences. The Kido incident is a stark reminder of the importance of proactive digital safety measures for families. While organizations have a responsibility to protect sensitive data, parents can take important steps to monitor, protect, and respond to potential threats.

Have you ever checked what personal information about your child is online? Let us know by writing to us at CyberGuy.com/Contact

Sign up to receive my FREE CyberGuy report
Get my best tech tips, urgent security alerts, and exclusive offers delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Guide to Surviving Scams, free when you join me CyberGuy.com/Newsletter

Copyright 2025 CyberGuy.com. All rights reserved.