Police investigating the hacking of Chinese toy company Vtech have made an arrest in the U.K.
In the attack on Nov. 14, someone gained access to information about Vtech customers, including names, email addresses, birth dates, photos and weakly encrypted passwords, the company said.
The information was stored in a database for its Learning Lodge app store, used by many of the company’s educational toys.
Later last month, Vtech said the data breach affected around 4.8 million of its customers, but by early this month the figure had risen to 11.6 million, including 6.4 million children.
On Tuesday, U.K. police arrested a 21-year-old man on suspicion of two offenses under the Computer Misuse Act: unauthorized access to a computer, and causing a computer to enable unauthorized access to data.
Police also seized electronic devices for forensic examination during the raid in Bracknell, a town to the West of London in an area known for its high-tech industry.
The arrest was made by officers from the South East Regional Organised Crime Unit (SEROCU) in an investigation with other agencies into the hacking of applications belonging to VTech, the unit said Tuesday.
The investigation is still in its early stages, the head of SEROCU’s cyber crime unit, Craig Jones, said.