Hackers Backtrack After UK Nursery Data Breach Sparks Outrage

Threat Summary

Category: Cybersecurity — Child Data Breach
Features: Stolen photos and records of minors, ransom demand, direct extortion calls, family childcare software compromise
Delivery Method: Hijacked credentials via initial access broker → data exfiltration → ransom and extortion campaign
Threat Actor: “Radiant” (new extortion group, attribution unverified)

A cyberattack on the UK nursery chain Kido has spiraled into one of the most disturbing breaches in recent memory, exposing photos and personal data of nearly 8,000 children. The malicious campaign, led by a group calling itself Radiant, posted the stolen material to an underground forum, sparking immediate outrage as images of children — at first unblurred — circulated online.

The attackers demanded a £100,000 ransom in bitcoin, threatening escalation if their demands were not met. In a chilling development, some parents even reported receiving direct phone calls from the hackers, with explicit threats made against them and their children.

A Rare “Retraction”

Amid growing backlash, Radiant partially blurred the images, then removed them altogether, issuing what they framed as an “apology.” Such backtracking is nearly unheard of in the cybercrime ecosystem. Analysts caution that the reversal likely had less to do with remorse and more with the group’s miscalculation of public reaction. By crossing into the highly sensitive domain of children’s photos, Radiant may have unintentionally triggered attention from law enforcement and intelligence services that normally take longer to mobilize against financially motivated actors.

The group’s ransom attempt ultimately failed: according to the BBC, Kido refused to pay the £100,000 demand. This, rather than any moral awakening, may explain why the stolen data was pulled offline.

Initial Access and Exploitation

The attackers claim they purchased stolen credentials via an initial access broker (IAB), a growing gray market where hijacked logins to corporate and SaaS platforms are sold to the highest bidder. Using those credentials, they allegedly breached Kido’s account with Famly, a family childcare management software provider.

Famly has disputed parts of this narrative. Reports indicate the company rejected Kido’s request to directly message parents through its system to warn them of the compromise — a controversial decision given the direct threats parents later received.

Why Retractions Are Rare

Radiant’s retreat stands out precisely because cybercriminals almost never follow through on promises to delete stolen data. Even in cases where ransom is paid, breaches often linger:

• LockBit / London Drugs (2024): Despite ransom payments, LockBit failed to delete stolen data from the Canadian retail chain, with records later surfacing on secondary markets.
• Clop / MOVEit Campaign (2023): Data was often duplicated, traded, or leaked further, regardless of negotiations.

That precedent makes it highly uncertain whether Radiant truly deleted the Kido data. Families and schools cannot safely assume the records are gone — the risk remains that backups exist, copies have been distributed, or data will resurface later on darknet forums.

The Bigger Picture

The Kido breach highlights a disturbing escalation in ransomware and extortion tactics: direct threats to parents using stolen child data. While healthcare and education have long been targeted for their sensitive information, crossing into the exploitation of children’s images pushes the boundaries of cybercrime into new territory.

The outrage Radiant faced also demonstrates the potential for public backlash to become a form of deterrence. By targeting children, the group alienated even segments of the cybercriminal underground that typically turn a blind eye to ransomware campaigns. This rare moment of hacker retreat underscores how certain targets — schools, hospitals, nurseries — carry both technical and societal tripwires.

But the larger concern remains: once such data is stolen, there is no way to guarantee deletion. Parents may face years of anxiety, unsure whether their children’s photos and personal information will reappear in other criminal marketplaces.

Support truth, health, and preparedness by shopping the Alex Jones Store through our link. Every purchase helps sustain independent voices and earns us a 10% share to fuel our mission. Shop now and make a difference!

https://thealexjonesstore.com?sca_ref=7730615.EU54Mw6oyLATer7a

Sponsored • TRJ Ads
Inquiries: contact@therealistjuggernaut.com

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE