A 15-year-old was arrested in Northern Ireland Monday for allegedly pulling off the "significant and sustained cyber attack" against U.K. ISP TalkTalk.
The London-based Metropolitan Police today announced that a teenage boy was arrested in County Antrim on suspicion of Computer Misuse Act offenses. He was later released on bail pending further charges.
"We know this has been a worrying time for customers and we are grateful for the swift response and hard work of the police," TalkTalk said in a statement.
The company said it will "continue to assist with the ongoing investigation," which is being conducted by the Metropolitan Police Cyber Crime Unit (MPCCU), the Police Service of Northern Ireland (PSNI), and the National Crime Agency.
A ransom demand was reportedly received by TalkTalk CEO Didi Harding on Friday; the hacker presumably threatened to dump customers' personal data online, a la Ashley Madison.
TalkTalk initially said the website breach put customer's personal data—including names, addresses, dates of birth, phone numbers, email addresses, TalkTalk account information, and credit card and/or bank details—in jeopardy, as all of its data was not encrypted. Today, it clarified that "investigations...show that the information that may have been accessed is not enough on its own to take money from your bank account."
This isn't the first TalkTalk breach, though. Earlier this year, it confirmed a late-2014 hack in which attackers stole names, addresses, phone numbers, and customer account numbers.