NurseryCam data breach: 10K accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2021-02-23
In February 2021, a series of egregiously bad security flaws were identified in the NurseryCam system designed for parents to remotely monitor their children whilst attending nursery. The flaws led to the exposure of over 10k parent records before the service was shut down. The email addresses alone were provided to Have I Been Pwned to ensure parents were properly notified of the incident. Exposed data: email addresses. The breach dates from Feb 12, 2021; Have I Been Pwned loaded it on Feb 23, 2021.
What to do
- If you had a NurseryCam account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
Sources
All live incidents on Threat Watch
