All four were arrested at their home addresses and had their electronic devices seized for digital forensic analysis.
A number of people from across the UK have been arrested as part of an investigation into cyber-attacks targeting M&S, Co-op and Harrods.
In the National Crime Agency-led investigation, two males aged 19, another aged 17, and a 20-year-old female were apprehended in the West Midlands and London on suspicion of Computer Misuse Act offences, blackmail, money laundering and participating in the activities of an organised crime group.
All four were arrested at their home addresses and had their electronic devices seized for digital forensic analysis.
Deputy Director Paul Foster, head of the NCA's National Cyber Crime Unit, said: "Since these attacks took place, specialist NCA cybercrime investigators have been working at pace and the investigation remains one of the Agency's highest priorities.
"Today's arrests are a significant step in that investigation but our work continues, alongside partners in the UK and overseas, to ensure those responsible are identified and brought to justice.”
Written by
Dan Raywood is a B2B journalist with 25 years of experience, including covering cybersecurity for the past 17 years. He has extensively covered topics from Advanced Persistent Threats and nation-state hackers to major data breaches and regulatory changes.
He has spoken at events including 44CON, Infosecurity Europe, RANT Forum, BSides Scotland, Steelcon and the National Cyber Security Show, and served as editor of SC Media UK, Infosecurity Magazine and IT Security Guru. He was also an analyst with 451 Research and a product marketing lead at Tenable.