NurseryCam said it did not believe the incident had involved any youngsters or staff being watched without their permission, but had shut down its server as a precautionary measure.
The Guildford-based company told the BBC its service was used by about 40 nurseries across the UK.
It said it had also notified the ICO. Under UK rules, the Information Commissioner's Office must be told of a breach if it has "significant impact" within 24 hours.
NurseryCam said it first became aware of the incident shortly after 17:00GMT on Friday 19th February.
Logins exposed
The firm said that a "loophole" in its systems had been used to obtain data from parents' viewing accounts including:
- usernames
- passwords
- names
- email addresses
NurseryCam have stated the service would remain suspended until a security fix was in place.
https://www.bbc.co.uk/news/technology-56141093