Four people under the age of 21 have been arrested in connection with a string of cyberattacks that disrupted operations at several major UK retailers, including Marks & Spencer, the Co-op, and Harrods, the National Crime Agency (NCA) announced.
The suspects, males aged 17 and 19, and a 20-year-old woman, were detained at their homes in the West Midlands and London. All are being questioned by the NCA’s National Cyber Crime Unit on suspicion of Computer Misuse Act offences, blackmail, money laundering, and involvement in organized crime. Electronic devices were seized during the raids.
The most serious incident, a ransomware attack in April, forced Marks & Spencer to suspend online clothing sales for 46 days, costing the company an estimated £300 million ($400 million) in operating profit. Click-and-collect services remain offline.
The NCA says its investigation is ongoing.