Parents alerted to NurseryCam security breach

BBC

21st February, 2021 10:53:34 printer

Parents alerted to NurseryCam security breach

A webcam system that lets parents drop in and watch their children while at nursery school has written to families to tell them of a data breach.

NurseryCam said it did not believe the incident had involved any youngsters or staff being watched without their permission, but had shut down its server as a precautionary measure.

The Guildford-based company told the BBC its service was used by about 40 nurseries across the UK.

It said it had also notified the ICO.

Under UK rules, the Information Commissioner's Office must be told of a breach if it has "significant impact" within 24 hours.

NurseryCam said it first became aware of the incident shortly after 17:00GMT on Friday.

It added the service would remain suspended until a security fix was in place.

Logins exposed

The firm said that a "loophole" in its systems had been used to obtain data from parents' viewing accounts including:

usernames

passwords

names

email addresses

"The person who identified the loophole has so far acted responsibly," said NurseryCam's director Dr Melissa Kao.

"He stated he has no intention to use this to do any harm [and] wants to see NurseryCam raise the overall standards of our security measures."

(BBC)


Top