Four Arrested in Connection with M&S and Co-op Cyber Attacks
In a significant development, four individuals have been arrested by police investigating the cyber-attacks that have caused widespread disruption to high-street retailers Marks & Spencer (M&S) and The Co-operative Food Group (Co-op). According to the National Crime Agency (NCA), the arrests were made on suspicion of Computer Misuse Act offences, blackmail, money laundering, and participating in the activities of an organised crime group.
Among those arrested is a 20-year-old woman from Staffordshire, who was apprehended at her home in the early hours of Thursday. The NCA also detained three males aged between 17 and 19 years old in London and the West Midlands, bringing the total number of arrests to four. Notably, one of the suspects, a 19-year-old man, is believed to be from Latvia.
Neighbours described a large police operation in the quiet Staffordshire cul-de-sac where the 20-year-old woman was arrested. They reported that dozens of NCA officers, some wearing balaclavas, arrived at her home and smashed down the door before taking away a large number of electronic devices.
Paul Foster, head of the NCA's National Cyber Crime Unit, hailed the arrests as "a significant step" in the investigation. He emphasized that the NCA's work continues alongside partners in the UK and overseas to identify and bring to justice those responsible for the attacks.
A Complex Web of Attacks
The cyber-attacks on M&S and Co-op have had a profound impact on the two retailers, with some shelves left bare at The Co-op for weeks and M&S operations expected to be affected until late July. The hacks, which began in mid-April, have resulted in significant financial losses for both companies, with M&S estimating a £300m loss in lost profits.
The attacks began with M&S, where a huge amount of private data belonging to customers and staff was stolen. The perpetrators also deployed malicious software called ransomware, scrambling the company's IT networks making them unusable unless a ransom was paid. In an email to the M&S boss, the hackers demanded payment.
A few days later, The Co-op was targeted by similar cybercriminals who broke into the firm and stole private data from millions of its customers and staff. The attackers also deployed ransomware, but the company had disconnected its internet from IT networks in time to prevent further disruption.
Harrods Also Targeted
Luxury retailer Harrods was also affected by the cyber-attacks, which forced it to disconnect its IT systems from the internet to keep the criminals out. The BBC revealed that the hackers had sent an offensive email to Harrods' boss demanding payment.
A Significant Crack in the Organised Crime Network
The arrests are a significant blow to the organised crime network responsible for the attacks, with the NCA working closely with partners in the UK and overseas to identify those involved. The operation was supported by officers from the West Midlands Regional Organised Crime Unit and the East Midlands Special Operations Unit.
About the Suspects
The four individuals arrested are:
- A 17-year-old British male from the West Midlands
- A 19-year-old British man from London
- A 19-year-old Latvian male from the West Midlands
- A 20-year-old British woman from Staffordshire
The NCA is continuing its investigation into the cyber-attacks and is working to identify those responsible. The arrests bring a significant step closer to bringing those involved in these serious crimes to justice.