In one of the more disturbing cyberattacks in recent memory, hackers have stolen and leaked sensitive information belonging to thousands of children from the global nursery chain Kido. The breach has raised serious concerns about the safety of children’s data, and the growing threat of cyber-crime targeting vulnerable groups.
The stolen data includes deeply personal and protected information, including names, home addresses, photographs, and safeguarding notes. Reports suggest that over 8,000 employees, children and their families have been affected.
What makes this breach particularly alarming is the hackers’ direct contact with parents via phone and email, expressing their ransom demands in an attempt to extort the nursery chain. Furthermore, the scope of the attack was international, with nurseries in London, China, India and the USA being affected.
The group behind the attack, known as ‘Radiant’, initially published a sample data set on the dark web and claimed responsibility. They have since threatened to expose more information, if their demands are not met. While Kido has not yet issued a public statement, it has reached out to many of the families impacted. The Metropolitan Police are currently investigating, though no arrests have been made.
Data breaches like this are sadly becoming more common, with individuals targeted indiscriminately. Just this year, large-scale cyberattacks were launched on companies such as the Co-operative and Marks & Spencer, compromising millions of customers’ personal data. The consequences of such breaches extend beyond financial fraud, they often cause significant emotional distress and anxiety, especially when children are involved.
For individuals affected by data breach, numerous avenues can be sought for compensation. Under Article 82 of the UK GDPR, individuals have the right to seek compensation if they suffer material damage (e.g. financial loss) or non-material damage (e.g. emotional distress) due to a breach of their personal data. Due to recent landmark cases, claims may be brought purely for emotional distress and anxiety, and sometimes no financial loss may be necessary for damages to be awarded.
At Farleys, we have extensive experience in handling claims following the accidental disclosure of personal information. We understand the impact these incidents can have on individuals and families, and we’re committed to helping those affected seek justice and compensation.
If you or a loved one has been affected by a negligent data breach, contact us today on 0330 828 3967 to speak with one of our specialists.
