{"id":174351,"date":"2025-10-02T03:59:07","date_gmt":"2025-10-02T03:59:07","guid":{"rendered":"https:\/\/www.newsbeep.com\/uk\/174351\/"},"modified":"2025-10-02T03:59:07","modified_gmt":"2025-10-02T03:59:07","slug":"hackers-delete-data-stolen-in-nursery-cyber-attack-after-backlash-2","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/uk\/174351\/","title":{"rendered":"Hackers delete data stolen in nursery cyber-attack after backlash"},"content":{"rendered":"<p class=\"sc-9a00e533-0 bJoRPJ\">Hackers who attempted to extort a nursery chain by posting stolen images and data about children on the darknet have removed the posts and claim to have deleted the information.<\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">The criminals <a target=\"_self\" href=\"https:\/\/www.bbc.co.uk\/news\/articles\/c62ldyvpwv9o\" class=\"sc-f9178328-0 jZoZnB\" rel=\"nofollow noopener\">began posting profiles<\/a> of the children to their website last Thursday, adding another 10 children days later and <a target=\"_self\" href=\"https:\/\/www.bbc.co.uk\/news\/articles\/c07vxv8v89lo\" class=\"sc-f9178328-0 jZoZnB\" rel=\"nofollow noopener\">vowing to continue <\/a>until Kido Schools paid a ransom in Bitcoin.<\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">The criminals also contacted parents directly with threatening phone calls whilst trying to get their ransom paid.<\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">But public revulsion at their attack appears to have forced the criminals to backtrack.<\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">First they blurred the images but kept the data up &#8211; now they have taken all the information offline, and apologised for their actions.<\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">Their apparent change of heart has been met with scepticism by experts, who had previously condemned the targeting of nurseries as a &#8220;new low&#8221; for cyber-criminals.<\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">&#8220;This is more about pragmatism than morality,&#8221; said cyber-security expert Jen Ellis.<\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">&#8220;These criminals are clearly shocked and worried by the attention their hack has caused and they are trying to protect themselves or their brand.&#8221;<\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">The hackers claim to have deleted everything they took &#8211; which included the private details and pictures of around 8,000 children as well as contact information for parents and carers.<\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">&#8220;All child data is now being deleted. No more remains and this can comfort parents,&#8221; one of the cyber-criminals involved told the BBC.<\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">It&#8217;s understood Kido have not paid the hackers a ransom which was thought to be around \u00a3100,000.<\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">Past cases have shown that hackers often say they have deleted stolen data and been found to have kept it or sold it on.<\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">When the UK&#8217;s National Crime Agency <a target=\"_self\" href=\"https:\/\/www.bbc.co.uk\/news\/technology-68344987\" class=\"sc-f9178328-0 jZoZnB\" rel=\"nofollow noopener\">took down the cyber crime gang LockBit<\/a> they discovered troves of data still on the criminal&#8217;s servers that victims had paid to be deleted.<\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">The nursery hackers, calling themselves Radiant, appear to be concerned that their hack has crossed an undefined moral line since the public outcry began against them.<\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">&#8220;We are sorry for hurting kids,&#8221; the cyber-criminals told BBC News.<\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">It&#8217;s not known who the hackers or hacker are but they appear to be a new and possibly inexperienced group. <\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">Their darknet site is newly created but they claim to have carried out other hacks in the past.<\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">This isn&#8217;t the first time that cyber-criminals have backtracked on an attack.<\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">In 2020 a gang using Dopplepaymer ransomware gifted their encryption key to a German hospital after the <a target=\"_self\" href=\"https:\/\/www.bbc.co.uk\/news\/technology-54204356\" class=\"sc-f9178328-0 jZoZnB\" rel=\"nofollow noopener\">chaos contributed to the death<\/a> of an emergency care patient.<\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">When <a target=\"_self\" href=\"https:\/\/www.bbc.co.uk\/news\/world-europe-57184977\" class=\"sc-f9178328-0 jZoZnB\" rel=\"nofollow noopener\">Conti hackers attacked the Irish Health Service<\/a> in 2021 they too gave their antidote away for free claiming not to have deliberately targeted hospitals.<\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">Months before, criminals from the Darkside group took the strange decision to post proof that they had <a target=\"_self\" href=\"https:\/\/www.bbc.co.uk\/news\/technology-54591761\" class=\"sc-f9178328-0 jZoZnB\" rel=\"nofollow noopener\">donated some of their ill-gotten bitcoin<\/a> to charities.<\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">The nursery hackers claimed they broke into the nursery&#8217;s systems by buying access to one of Kido&#8217;s staff computers which was compromised by a separate hacker.<\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">In a common process, the &#8220;initial access broker&#8221; sold the Kido access to Radiant, which went on to further infiltrate Kido&#8217;s systems and steal the data.<\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">The majority of the downloaded material including the pictures of children was taken from Kido&#8217;s account with Famly &#8211; a popular early years education platform . <\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">Famly has rejected Kido&#8217;s message to parents that the breach happened as a result of Famly being compromised.<\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">It has stressed to the BBC that neither the security or infrastructure of the platform has been compromised at any point.<\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">Kido did not respond to a request for comment about the way the hackers stole the data. <\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">A spokesperson said only that: &#8220;We recently identified and responded to a cyber incident. We are working with external specialists to investigate and determine what happened in more detail. <\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">&#8220;We swiftly informed both our families and the relevant authorities and continue to liaise closely with them.&#8221;<\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">Radiant says it paid the initial access broker money for access to Kido&#8217;s system. <\/p>\n<p class=\"sc-9a00e533-0 bJoRPJ\">So with Kido refusing to pay and the hackers giving up their extortion attempt the criminals appear to have actually lost money in this cyber-attack.<\/p>\n","protected":false},"excerpt":{"rendered":"Hackers who attempted to extort a nursery chain by posting stolen images and data about children on the&hellip;\n","protected":false},"author":2,"featured_media":174352,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[49,50,51,47,52,48],"class_list":{"0":"post-174351","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-headlines","8":"tag-headlines","9":"tag-news","10":"tag-top-news","11":"tag-top-stories","12":"tag-topnews","13":"tag-topstories"},"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/174351","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/comments?post=174351"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/174351\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media\/174352"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media?parent=174351"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/categories?post=174351"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/tags?post=174351"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}