Four people have been arrested as part of a National Crime Agency (NCA) investigation into cyber attacks targeting major UK retailers M&S, Harrods and Co-op.
Two 19-year-old men, a 17-year-old boy and a 20-year-old woman were detained at their homes in the West Midlands and London early on Thursday morning.
All four were arrested on suspicion of offences including computer misuse, blackmail, money laundering and involvement in an organised crime group. Electronic devices were seized for forensic examination.
The arrests relate to a series of cyber attacks which took place in April this year. The three retailers were among several affected at the time, with some online services briefly disrupted. The full extent of the impact has not been publicly disclosed.
Deputy director Paul Foster, head of the NCA’s National Cyber Crime Unit, said the arrests were “a significant step” in what remains one of the agency’s highest-priority investigations.
In a statement released today, Foster thanked the targeted companies for their cooperation and urged other businesses to engage with law enforcement in the wake of similar attacks.
“Cyber attacks can be hugely disruptive for businesses,” Foster said. “Hopefully this signals to future victims the importance of seeking support and engaging with law enforcement as part of the reporting process.”
The NCA’s National Cyber Crime Unit leads efforts to combat serious cyber threats in the UK, often working alongside regional and international partners. Thursday’s operational activity was supported by officers from the West Midlands Regional Organised Crime Unit and the East Midlands Special Operations Unit.
The four individuals remain in custody for questioning. The NCA has not named any of the suspects.
The Computer Misuse Act, under which the arrests were made, criminalises unauthorised access to computer systems and other forms of cyber-enabled crime.
The investigation is ongoing.
