The unidentified 21-year-old man was arrested today in a town about 30 miles outside of London on suspicion of crimes including using "unauthorised access to [a] computer to facilitate the commission of an offence," but little is known about the suspect beyond that — including precisely how he is tied to the breach.

"We are still at the early stages of the investigation and there is still much work to be done," an official with the South East Regional Organised Crime Unit, which made the arrest, said in a statement.

The motives in the hack are still unclear. In an interview with Motherboard, the hacker claimed that it was done only to bring attention to VTech's security practices.