The Kido nursery chain suffered a severe ransomware attack executed by the Radiant group, compromising sensitive data of approximately 8,000 children and their families. The stolen information included names, home addresses, photographs, parent/carer contact details, confidential medical records, and safeguarding notes—accessed via a breach in Famly, a third-party software provider used by the nursery. The attackers demanded £600,000 in Bitcoin, directly contacted parents to escalate pressure, and leaked some children’s photos on the dark web before retreating due to backlash, claiming deletion of all stolen data. The incident led to the arrest of two 17-year-old suspects by the UK Metropolitan Police’s Cyber Crime Unit. The attack highlights the education sector’s vulnerability, where limited IT funding and phishing exploits (e.g., Remcos RAT) make institutions prime targets. The breach’s use of children’s data for extortion was condemned as an unprecedented low in cybercrime, elevating data protection to a critical safety priority.