Particle.news

Download on the App Store

Co-op Confirms Theft of All 6.5 Million Member Records

Four suspects have been arrested by the National Crime Agency following the breach.

Image
LONDON, UNITED KINGDOM - 2025/05/03: General view of the logo at a Co-op supermarket. The group says that hackers have extracted data related to a large number of its customers. This follows recent cyberattacks on Marks and Spencer as well as Harrods. (Photo by Vuk Valcic/SOPA Images/LightRocket via Getty Images)
Image
Image

Overview

  • Co-op CEO Shirine Khoury-Haq said hackers accessed names, addresses and contact information of every member while no financial or transaction data were taken.
  • Investigators say the attack was halted when IT staff severed internet access to stop ransomware deployment and monitored hacker activity in real time for law enforcement.
  • The breach formed part of an April ransomware and social-engineering campaign by groups such as Scattered Spider targeting other UK retailers including Marks & Spencer and Harrods.
  • The National Crime Agency has arrested and bailed four individuals aged 17–20 on suspicion of blackmail, money laundering and offences under the Computer Misuse Act.
  • Co-op has partnered with social-impact business The Hacking Games to identify young cyber talent and channel their skills into ethical cybersecurity careers.