Most parents know to keep their PINs and passwords private. But children's personal data is just as valuable to cybercriminals, and far less protected. Understanding the risks is the first step toward keeping your family safe.
The Kido Nurseries Data Breach: A Warning for Every Parent
In September 2025, hackers targeted Kido Nurseries, a childcare chain operating across the United Kingdom. They stole the personal records of more than 8,000 children and their families, including names, home addresses, photographs, and parent contact details. The attackers then demanded a £600,000 Bitcoin ransom, posted samples of children's profiles on a dark web site, and began calling parents directly to apply pressure.
Two teenagers believed to be members of the ransomware group known as "Radiant" were eventually arrested. But the breach had already caused serious distress to thousands of families who had trusted a childcare provider with sensitive personal information.
This is not an isolated case. In the United States, more than 3,700 data breaches at educational institutions have exposed over 37.6 million student records. Schools, nurseries, sports clubs, and children's apps are all active targets, and the problem is growing globally.
Why Cybercriminals Target Children's Data
Children are among the most valuable targets in cybercrime, for one straightforward reason:
they have clean credit histories.
Research from Carnegie Mellon University found that children are more than 50 times more vulnerable to identity theft than adults. A child's name, date of birth, and address, the kind of information shared routinely with schools, clubs, and apps, can be used to open fraudulent accounts, apply for credit, or build entirely fake identities. Because parents rarely monitor their child's credit history, this fraud often goes undetected for years, sometimes until the child is old enough to apply for a loan or a job.
That detection gap, which can stretch a decade or more, is exactly what makes child identity theft so attractive to criminals.
How to Protect Your Child's Personal Data: Practical Steps for Families
You do not need a cybersecurity background to significantly reduce your family's risk. These five steps are practical, free, and do not take long.
1. Question What You Share
Before providing a child's personal details to an app, school portal, or club, ask whether that information is actually required for the service. Date of birth and home address are not always necessary. When they are requested, find out why and how the data will be stored.
2. Review App Permissions With Your Child
Many apps request access to location, camera, and contacts by default. Set aside five minutes to go through each app on your child's device together. Disable any permissions that are not clearly needed.
3. Ask Your Child's School About Data Security
Parents have every right to ask how student data is stored, who has access to it, and what security measures are in place. Schools that take these questions seriously are schools that take your child's data protection seriously.
4. Use Strong, Unique Passwords for Family Accounts
Reusing the same password across multiple platforms means a single breach can unlock everything. A free password manager makes it easy for your family to use strong, unique passwords without the burden of memorising them.
5. Enable Two-Factor Authentication (2FA)
On any account that offers it, including email, school portals, and social media, two-factor authentication adds a critical second layer of security. Even if a password is stolen, 2FA blocks most unauthorised access attempts automatically.
Child Data Protection Is a Community Responsibility
The Kido Nurseries breach is a reminder that protecting children online is not only about what they do on their devices. It is also about the organisations that hold their information and whether those organisations have earned and maintained that trust.
Asking the right questions of the schools, apps, and services your children use costs nothing. It also puts your family in a stronger position than most.
CyKids exists to help Cayman Islands families stay informed and stay protected. To learn more about child data privacy and cybersecurity for families, join us at our next Community Workshop or reach out at info@cykids.ky.
Randall is a cybersecurity professional and volunteer contributor to CyKids Cayman. He holds
multiple industry certifications and is passionate about making digital safety accessible to every
family in the Cayman Islands.
Sources:
- Reuters: London nurseries hit by hackers, data on 8,000 children stolen
- BBC News: Children's names, pictures and addresses stolen in nursery hack
- The Guardian: Kido nursery hackers threaten to publish more children's profiles
- Metropolitan Police: Two teenagers arrested in investigation into cyber incident affecting London nurseries
- Comparitech: US schools leaked 37.6 million records in 3,713 data breaches
- AZ Family: Children 50 times more vulnerable to identity theft than adults, experts warn
- ESET: Child identity theft: how do I keep my kids' personal data safe?
