Overview

• CEO Shirine Khoury-Haq disclosed that hackers accessed names, addresses and contact details but did not obtain any financial or transaction data.
• Co-op’s IT team severed internet connections in April to thwart a ransomware deployment, though attackers had already copied the member file.
• The National Crime Agency has arrested four suspects aged 17 to 20 in connection with coordinated cyberattacks on Co-op, Marks & Spencer and Harrods.
• The incident prompted scrutiny of legacy IT systems and has spurred government and industry discussions on mandatory incident reporting.
• Co-op’s partnership with The Hacking Games aims to identify young cyber talent and channel their skills into ethical security roles.