Metropolitan Police said the boy was arrested in County Antrim, on suspicion of offences under the Computer Misuse Act. It said the arrest was made after a joint operation by the Police Service of Northern Ireland and the Met’s cyber crime officers.
TalkTalk said in a statement issued by the police:
“We know this has been a worrying time for customers and we are grateful for the swift response and hard work of the police. We will continue to assist with the ongoing investigation.”
“In the meantime, we advise customers to visit http://talktalk.co.uk/secure for updates and information regarding this incident.”
In an previous update over the weekend, TalkTalk sought to calm customers stating that hack “was not as bad as first thought”. It said the amount of financial data stolen from its systems was “materially lower” than expected, and said that the attack was on its public-facing website and not its core systems.
However up to four million customers were thought to be at risk, with experts calling on authorities to investigate as urgently as it would for a large-scale physical theft.
Dido Harding, CEO of TalkTalk said in an interview with Sky News: “The financial information they have on its own is not enough for them to access your bank account.”
Most of the risk, Harding said, was from criminals who would seek to pose as bank staff in calls to unsuspecting customers and phish for enough information to break into bank accounts.
“We can confirm that we do not store complete credit card details on the website; any credit card details that may have been accessed had a series of numbers hidden and therefore are not usable for financial transactions,” Talk Talk said.
“We now expect the amount of financial information that may have been accessed to be materially lower than initially believed and would on its own not enable a criminal to take money from your account,” Harding added.
The company said that the Metropolitan Police Cyber Crime Unit was continuing to investigate, adding that it had hired BAE’s Applied Intelligence arm to work with the Met to carry out the investigation.