Article Details
Scrape Timestamp (UTC): 2025-07-10 11:36:31.255
Source: https://www.theregister.com/2025/07/10/nca_arrests_four_in_connection/
Original Article Text
Click to Toggle View
NCA arrests four in connection with UK retail ransomware attacks. Crimefighting agency cagey on details, probes into intrusions at M&S, Harrods, and Co-op continue. The UK's National Crime Agency (NCA) arrested four individuals suspected of being involved with the big three cyberattacks on UK retail businesses in recent weeks. The agency confirmed it arrested all four in their homes this morning. The suspects included two young men from the West Midlands, a Brit aged 17 and a Latvian national aged 19; one 19-year-old British man from London; and a British woman aged 20 from Staffordshire. Senior officials at the NCA said the four individuals are thought to be involved in all three retail attacks on M&S, Co-op, and Harrods. Details about the quartet and their identities are being kept largely under wraps by officers for various reasons, including affording them a right to a fair trial, safeguarding concerns, and for other matters which are not reportable at this time. The NCA noted: "There has been speculation around the identities of those suspected to be behind these attacks. It is important to note that we are unable to identify (name) those arrested today, as they are yet to be charged or convicted with any offences. This investigation remains at an early stage and it is important these individuals' right to a fair trial is protected. "Their home addresses have been omitted and the location of arrests has been left intentionally limited. We are unable to be more specific on locations at this stage, as there are a number of significant safeguarding concerns in relation to those arrested that the NCA and partners are required to manage." NCA officers arrested the four individuals in the early hours of the morning on June 10, and said they have seized the quartet's electronic devices, which will be forensically analyzed for additional evidence. They remain in custody for police questioning, and the NCA was unable to confirm for how long they will be held. All four were charged with offences under the Computer Misuse Act, and for alleged offences related to blackmail, money laundering, and participating in the activities of an organized crime group. Deputy director Paul Foster, head of the NCA's National Cyber Crime Unit, said: "Since these attacks took place, specialist NCA cybercrime investigators have been working at pace and the investigation remains one of the Agency's highest priorities. "Today's arrests are a significant step in that investigation but our work continues, alongside partners in the UK and overseas, to ensure those responsible are identified and brought to justice. "Cyberattacks can be hugely disruptive for businesses, and I'd like to thank M&S, Co-op, and Harrods for their support to our investigations. Hopefully, this signals to future victims the importance of seeking support and engaging with law enforcement as part of the reporting process. The NCA and policing are here to help." Officials said they also wished to thank the three victims and local police forces tasked with the arrests for their cooperation that led to today's operational activity.
Daily Brief Summary
The UK's National Crime Agency (NCA) apprehended four individuals linked to recent ransomware attacks on major retailers, including M&S, Co-op, and Harrods.
Arrests were made at various locations across the UK, targeting two men from the West Midlands, one man from London, and one woman from Staffordshire.
Those detained are suspected of being involved in all three attacks, facing preliminary charges under the Computer Misuse Act, alongside allegations of blackmail and money laundering.
The NCA seized electronic devices from the suspects for forensic analysis to gather more evidence in their ongoing investigation.
Authorities emphasize the significance of these arrests but have withheld specific details to protect the right to a fair trial and manage significant safeguarding concerns.
The NCA's Deputy Director, Paul Foster, highlighted the disruption caused by cyberattacks and reiterated the importance of cooperation between businesses and law enforcement in cybercrime cases.
The investigation remains a top priority for the NCA, with further work anticipated both in the UK and with international partners.