“`html
Police have apprehended two 17-year-old males in connection with a cyber-attack targeting a London-based nursery chain.
The Metropolitan Police Service stated that the arrests were made at residential properties in Bishop’s Stortford, Hertfordshire. The suspects are being held on suspicion of computer misuse and blackmail offences.
The cyber intrusion reportedly resulted in the theft of personal data, including photographs, names, and addresses, of approximately 8,000 children from the Kido nursery group.
Law enforcement authorities confirmed that the case was referred to them by Action Fraud, the national cybercrime reporting center, on September 25, detailing a ransomware attack.
The individuals apprehended remain in police custody for questioning.
Detective Chief Superintendent Will Lyne, Head of Economic and Cybercrime for the Met, commented: “We recognize that incidents of this nature can generate significant anxiety, particularly among parents and guardians concerned about the potential impact on their families.”
“These arrests represent a considerable advancement in our investigation, and we are committed to working alongside our partners to ensure those responsible are brought to justice.”
The BBC first learned of the Kido nursery cyber-attack on September 22, when a hacking group identifying itself as Radiant sought media attention regarding the data breach as part of an extortion attempt targeting the nursery chain for approximately £600,000 in Bitcoin.
The BBC refrained from reporting on the breach until September 25, when the hackers began publishing images and profiles of some of the children on a darknet site. Cyber security experts described this action as a “new low” in cybercrime.
The compromised data included children’s names, addresses, photographs, and contact information for their parents and caregivers.
The hackers directly contacted parents regarding the breach to exert pressure on Kido to pay the ransom for the data’s deletion. The number of children’s profiles exposed eventually reached 20.
In an unexpected turn, the hackers subsequently blurred the images, citing concerns about their reputation among other hacking groups.
On October 2, the hackers removed all stolen data and images from their darknet site, claiming to have permanently deleted all 8,000 children’s files. They stated, “No more remains, and this can comfort parents.”
A Kido spokesperson stated: “We welcome this swift action from the Met Police and acknowledge this as a crucial step in holding those responsible accountable.”
“We have fully cooperated with law enforcement and relevant authorities throughout this process. We remain dedicated to supporting the police and, most importantly, the families, colleagues, and the broader Kido community.”
The Met Police initially reported that a 22-year-old man had been arrested, but has since clarified that the correct age is 17.
Unite members at defence firm Leonardo vote in favour of strike action over a pay dispute.
Lewisham Council condemned for major delays to repairs and a lack of communication with tenants.
Shaine March appears at the Old Bailey and admits manslaughter on the basis of diminished responsibility.
Vruj Patel is jailed for 22 years after he admits 17 charges which include the rape of a child.
Dashcam video shows the moment a double decker bus ploughs into a taxi and building in Westminster.
“`