UK Police Programme Redirects Young Hackers Towards Cyber Security Careers

Lucas was 16 when he got into trouble for hacking his school computers. Twice.

"It was like a challenge to see if I could," he told the BBC.

He wanted access to play games and visit blocked websites so he started tinkering with programming.

At one point he even unscrewed the computer tower to take some internal components home for tests.

"It's quite a sense of achievement when you've succeeded in doing something that two or three trained professionals have spent a lot of time trying to stop you doing," he said.

He was close to being expelled - but his worried mother had no idea how serious his actions were.

She called the police and invited an officer from the nationwide programme Cyber Choices to their home in rural Cumbria.

"My mum was like, 'ooh, you've got a detective coming to speak to you, you're in a lot of trouble'," Lucas said.

"So I was sat at the window waiting. Who's going to come? How much trouble am I going to be in?"

PC Sam Cooper knocked on the door earlier this year and has been working with Lucas ever since.

He explained to Lucas, as he has with dozens of other children, there were real consequences and harm caused by cyber-attacks.

Cooper said showing the mostly teenage boys what was legal and not was step one.

Then comes positive encouragement over months of one-to-one meetings, usually at their homes.

"I'll try and find where their interests are and try and divert them towards professional training, qualifications," he said.

Cyber Choices, also known as Cyber Prevent, is like a hacker rehab course.

It works in parallel with the more well-known Prevent scheme, which identifies potential terror offenders.

While at Lucas's house I saw first hand how some of the conversations work.

Lucas enthusiastically explained his latest computer experiments and Cooper asked him what software and tools he was using to check they were legitimate.

Soon the officer will take Lucas on a visit to the local university where he will be shown the cyber security course with the aim of inspiring him to apply.

More than 1,150 cases have been referred to the National Crime Agency (NCA)'s Cyber Choices scheme in the last eight years - nearly 600 of those were in the last three years.

Authorities warn teenage hacking groups are playing an increasingly prominent role in serious cyber-attacks.

Young, English-speaking hackers have been linked to attacks on major organisations including Transport for London (TfL) and MGM Grand in 2024, and Marks & Spencer and the Co-op in 2025.

Individuals are also being increasingly targeted in hacks for their cryptocurrency holdings.

"It certainly has become more of a problem," said Paul Foster, who leads cyber prevention work at the NCA.

"Certainly English-speaking, Western world individuals that we know are now more active in cyber-crime."

He said young people were engaged with online activity and devices at increasingly young ages exposing them to criminal communities and influences.

Police say many young offenders do not initially set out to become criminals.

Instead, they often begin by experimenting with technology, testing systems or trying to bypass restrictions before becoming drawn into online communities where hacking is encouraged.

The children can come from all over the country and from a range of backgrounds, and Cooper said many be autistic or are neurodiverse.

"The vast majority of individuals I'm dealing with are neurodiverse," he said.

"Even if they're not labelled as such... they obviously have more affinity with computers than they do with practical and social reality," he said.

"Sometimes they can get fixated on certain goals and not listen to any adults around them, so that's where I come in and sit them down and talk to them."

In 2023, a high profile teenage hacker called Arion Kurtaj, who had hacked Grand Theft Auto maker Rockstar Games, was deemed unfit to stand trial because he was severely autistic.

Two teenage hackers who were jailed earlier this month for the TfL hack were also autistic - which was taken into account by the judge when he sentenced them to five and a half years in prison.