With over 1,000 child care centers and nurseries operating across a global footprint, Bright Horizons runs one of the largest child care and early education networks in the world. The company partners with more than 1,450 employers to deliver on-site child care, back-up care, elder care, and workforce education programs. Founded in 1986, the operation now spans more than 32,000 employees managing sensitive family data, educational records, and employer integrations at scale.
For a cybersecurity team, the threat surface here is broad and personal. Bright Horizons handles protected health information, minor data, financial records tied to tuition management programs, and authentication flows across thousands of physical sites and digital platforms. The attack model includes credential compromise across a large distributed workforce, data exfiltration of PII belonging to children and families, and supply-chain risk from employer API integrations. Compliance obligations likely touch COPPA, HIPAA-adjacent family care data, and varying international privacy regimes given the worldwide presence.
The company's service portfolio - from Early Education and Preschool to the Horizons Degree Program and College Coaching - means security isn't just perimeter defense. It's protecting the data pipelines that connect families, educators, and corporate clients. Bright Horizons has been recognized on FORTUNE's "100 Best Companies to Work For" list 20 times and has received Forbes' Best Employers for Diversity and People Magazine's Companies that Care designations, operating under HEART principles: Honesty, Excellence, Accountability, Respect, and Teamwork.
