Four people have been arrested today by police investigating cyber attacks that crippled M&S, the Co-op and Harrods.
Two British men aged 17 and 19 were detained in the West Midlands and London alongside a 19-year-old Latvian an a 20-year-old British woman from Staffordshire.
They are accused of a variety of offences under the Computer Misuse Act, including blackmail, money laundering and involvement in organised crime.
All four were arrested at home and had their electronic devices seized for digital forensic analysis.
They are currently being questioned by specialist National Crime Agency (NCA) officers in relation to the three attacks, which took place in April this year.
The cyber attack on M&S is estimated to have cost the retailer £300m and shaved £1billion off its market value.
The cyber attack on Marks & Spencer cost the retailer an estimated £300million
Empty shelves inside an M&S store in Paddington, London, on April 29, following the cyber attack
The British high street giant halted orders on its website and saw empty shelves after being targeted by hackers around a month ago over the Easter weekend.
M&S boss Stuart Machin recently admitted the attack – caused by ‘human error’ – had been ‘the most challenging situation we’ve encountered’.
Harrods was struck shortly after, followed by the Co-op.
Detectives investigating the attacks previously revealed they were focused on the Scattered Spider crew of English-speaking teenage hackers.
Scattered Spider is thought to be made up of 1,000 mainly British and American youths and young men, and has already gained global notoriety for a slew of attacks on major brands.
Such criminal outfits typically demand up to £10million in ransom for returning full access to firms, according to industry sources.
Previous arrests have seen alleged members of the criminal outfit from the UK being detained by cops.
Among them is Tyler Robert Buchanan. The 23-year-old is alleged to be Scattered Spider’s leader. He was arrested at a Spanish airport in June last year.
M&S chief executive Stuart Machin revealed that hackers accessed personal customer data
The Co-Op also experienced supply issues. Pictured is a branch in Kirriemuir, Angus
Scotsman Buchanan is alleged to have been behind the 2023 hack of Las Vegas casino operators Caesar’s Entertainment and MGM Resorts International.
US prosecutors also claim he was part of a sophisticated £9million cryptocurrency fraud, which saw victims being sent phishing text messages warning their accounts would be closed.
The link directed them to a legitimate-looking website which they then entered their personal details in. It’s alleged the hacking gang then seized these details and used them to pilfer £9million worth of virtual currency.
In May, Google said that those responsible for the attacks of M&S, Harrods and the Co-Op were also targeting US companies, with retailers worldwide now racing to boost their cyber defences.
M&S shareholder David Wallace said the retailer ‘dropped the ball’ with its handling of the attack, adding that it ‘should have been handled better’.
He told BBC Radio 4’s Today programme: ‘They’ve stumbled on this one. M&S have to take firm control of this situation, solve the problems and reassure customers and shareholders.
‘They need to be firm, decisive and communicate their solution. It took a little bit too long… They should be making it very clear how they are handling it and how people have been impacted by it.’
Mr Wallace said he will remain invested, adding: ‘I still believe in them.’
Harrods was another high-profile victim of the damaging cyber attacks
Deputy Director Paul Foster, head of the NCA’s National Cyber Crime Unit, said today: ‘Since these attacks took place, specialist NCA cybercrime investigators have been working at pace and the investigation remains one of the Agency’s highest priorities.
‘Today’s arrests are a significant step in that investigation but our work continues, alongside partners in the UK and overseas, to ensure those responsible are identified and brought to justice.
‘Cyber attacks can be hugely disruptive for businesses and I’d like to thank M&S, Co-op and Harrods for their support to our investigations.
‘Hopefully this signals to future victims the importance of seeking support and engaging with law enforcement as part of the reporting process. The NCA and policing are here to help.’
Today’s arrests were supported by officers from the West Midlands Regional Organised Crime Unit and the East Midlands Special Operations Unit.
