Four people arrested in connection with M&S, Co-op and Harrods cyber-attacks

The police have arrested four people for their potential involvement in the major cyber-attacks against Marks & Spencer, Co-op and Harrods earlier this year. 

Three men and a woman were detained on suspicion of Computer Misuse Act offences, blackmail, money laundering, and participating in the activities of an organised crime group, in the early hours of Thursday, the National Crime Agency (NCA) has confirmed.

A 20-year-old woman was arrested in Staffordshire, while three men aged between 17 and 19 were arrested in London and the West Midlands, in a “significant step” in the investigation into the string of cyber incidents.

All four were arrested at their homes, and remain in custody. The police have seized their electronic devices.

Paul Foster, head of the NCA’s National Cyber Crime Unit, said: “Since these attacks took place, specialist NCA cybercrime investigators have been working at pace and the investigation remains one of the agency’s highest priorities.

“Today’s arrests are a significant step in that investigation but our work continues, alongside partners in the UK and overseas, to ensure those responsible are identified and brought to justice.”

M&S was the first of the major British retailers to be targeted by cybercriminals in mid-April, triggering the shutdown of multiple of its online services. It is estimated that the hack has cost the company £300m in lost profits. The retailer confirmed some personal customer data was accessed during the breach, including names, numbers, and home and email addresses.

The attack on Co-op in May also led to the theft of customer information and left the supermarket chain facing a significant stock problem, with shelves left empty for days.