A webcam system that lets parents drop in and watch their children while at nursery school has written to families to tell them of a data breach.
NurseryCam said it did not believe the incident had involved any youngsters or staff being watched without their permission, but had shut down its server as a precautionary measure.The Guildford-based company told the BBC its service was used by about 40 nurseries across the UK.
It said it had also notified the ICO.
Under UK rules, the Information Commissioner's Office must be told of a breach if it has "significant impact" within 24 hours.
NurseryCam said it first became aware of the incident shortly after 17:00GMT on Friday.
It added the service would remain suspended until a security fix was in place.
Logins exposedThe firm said that a "loophole" in its systems had been used to obtain data from parents' viewing accounts including:
"The person who identified the loophole has so far acted responsibly," said NurseryCam's director Dr Melissa Kao.
"He stated he has no intention to use this to do any harm [and] wants to see NurseryCam raise the overall standards of our security measures."