Three teenagers and a woman have been arrested in the UK as part of an investigation into cyber attacks targeting Marks & Spencer, Co-op and Harrods.
The National Crime Agency (NCA) said the individuals were arrested early on Thursday morning on suspicion of blackmail, money laundering, offences linked to the Computer Misuse Act and participating in the activities of an organised crime group.
The arrests include a 17-year-old British man from the West Midlands, a 19-year-old Latvian man from the West Midlands, a 19-year-old British man from London and a 20-year-old British woman from Staffordshire.
All four were arrested from their home addresses and remain in custody.
The police also seized electronic devices from the properties.
It comes after investigations by NCA into attacks against the three retailers, where hackers sought ransom payments after breaking into their IT systems.
M&S was the first of the retailers to be targeted by the hackers, with the retailer shutting a raft of systems down in response on Easter Sunday.
The company said the cyber attack has cost the firm around £300 million after it shut down its website for six weeks.
Meanwhile, Co-op saw payments disrupted and shelves become bare from May because of the fallout of its cyber attack.
Hackers also stole Co-op members’ personal data, such as names and contact details.
Harrods restricted internet access across its websites in May following attempts to gain unauthorised access to its systems.
Paul Foster, head of the NCA’s National Cyber Crime Unit, said: “Since these attacks took place, specialist NCA cybercrime investigators have been working at pace and the investigation remains one of the agency’s highest priorities.
"Today’s arrests are a significant step in that investigation but our work continues, alongside partners in the UK and overseas, to ensure those responsible are identified and brought to justice.
“Hopefully this signals to future victims the importance of seeking support and engaging with law enforcement as part of the reporting process.”
It came days after M&S chairman Archie Norman told MPs that two other “large British companies” have been impacted by unreported cyber attacks in recent months, as he detailed the “traumatic” attack on the historic retailer.
An M&S spokeswoman said: “We welcome this development and thank the NCA for its diligent work on this incident.”
