Teenage Cyber Gang Arrested After Strikes on M&S, Co-op and Harrods

Hackers targeting your weekly food shop and luxury handbags? Yep, welcome to the very 2025 reality of cybercrime. The National Crime Agency (NCA) has arrested four people – a 20-year-old woman, two 19-year-old males and one 17-year-old – in connection with a string of high-profile cyber attacks on M&S, Co-op, and Harrods.

The suspects were picked up in early-morning raids in London and the West Midlands, and are now under investigation for offences under the Computer Misuse Act, as well as blackmail, money laundering and alleged involvement in organised crime. Not exactly teenage hobbyist hacker vibes.

MORE: Bumble is fighting for ‘Cyberflashing’ to be criminalised

DISCOVER: Why Should You Stop Texting: Cybersecurity Experts Reveal The Truth And Dangers

Image courtesy of mymillennialkitchen.com

According to the NCA, electronic devices have been seized and are now being combed through by forensic specialists – presumably in very dramatic fashion, with many screens and flashing servers. The arrests mark what Paul Foster, head of the NCA’s cybercrime unit, called a “significant step” in a case that remains “one of the agency’s highest priorities”, according to The BBC.

He added: “Our work continues, alongside partners in the UK and overseas, to ensure those responsible are identified and brought to justice.”

MORE: M&S Are Back On Track

DISCOVER: Has your Peloton been hacked? Maybe.

Image @bristolpostnews via Pinterest

The digital chaos started in April, when M&S was hit by a “sophisticated impersonation” attack via a third party. The result? Shelves sitting empty and online orders screeching to a halt. The disruption is still ongoing and could cost the retailer up to £300 million this year. Ouch.

Chairman Archie Norman recently described the attack as “traumatic” and like an “out-of-body experience” during a session with MPs – which honestly sounds like how most of us feel when we get locked out of our own Instagram account. He declined to confirm whether M&S had paid a ransom, simply saying: “We are not discussing any of the details of our interaction with the threat actor… but that subject is fully shared with the NCA.”

MORE: Brad Pitt AI Scam: How Tech Fooled a French Woman Out of $800K

DISCOVER: Coperni Just Dropped Its Ray-Ban Meta Collab During Their Paris Fashion Week ‘LAN Party’

Image @aarryy01 via Pinterest

But M&S wasn’t the only one under digital fire. Days later, Co-op was targeted and forced to shut down internal systems. Harrods followed shortly after, hit with its own cyber strike, though its stores and website continued to function.

Of those arrested, two of the young men are from the West Midlands, one is from London, and the woman is from Staffordshire.

An M&S spokesperson said: “We welcome this development and thank the NCA for its diligent work.” A Co-op rep added: “Hacking is not a victimless crime… we are pleased… to see this has led to these arrests.”