A second teenager has been arrested in conjunction with the recent TalkTalk data breach.

A 16-year-old boy was taken into custody Thursday in England, on suspicion of Computer Misuse Act offenses. He has been released on bail, pending further charges.

London's Metropolitan Police Cyber Crime Unit searched the Feltham home where the boy was apprehended, as well an address in Liverpool.

Thursday's arrest comes only days after a 15-year-old was detained in Northern Ireland for allegedly pulling off the "significant and sustained cyber attack" against U.K. ISP TalkTalk.

The first culprit was described to The Guardian as a "quiet boy" who recently moved to the area with his family. There is no word on his connection to the other boy.

The Met's cybercrime unit and officers from the National Crime Agency—Britain's FBI—continue to investigate.

A ransom demand was reportedly received last week by TalkTalk CEO Didi Harding; the hackers presumably threatened to dump customers' personal data online, a la Ashley Madison.

TalkTalk initially said the breach put customers' personal data—names, addresses, dates of birth, phone numbers, email addresses, account information, credit card/bank details—in jeopardy, as all of its data was not encrypted.

On Monday, the company clarified that "investigations … show that the information that may have been accessed is not enough on its own to take money from your bank account."

This isn't the first TalkTalk breach, though. Earlier this year, it confirmed a late-2014 hack in which attackers stole names, addresses, phone numbers, and customer account numbers.