Overview
- Co-op CEO Shirine Khoury-Haq said hackers accessed names, addresses and contact information of every member while no financial or transaction data were taken.
- Investigators say the attack was halted when IT staff severed internet access to stop ransomware deployment and monitored hacker activity in real time for law enforcement.
- The breach formed part of an April ransomware and social-engineering campaign by groups such as Scattered Spider targeting other UK retailers including Marks & Spencer and Harrods.
- The National Crime Agency has arrested and bailed four individuals aged 17–20 on suspicion of blackmail, money laundering and offences under the Computer Misuse Act.
- Co-op has partnered with social-impact business The Hacking Games to identify young cyber talent and channel their skills into ethical cybersecurity careers.