Co-op Confirms Theft of 6.5 Million Member Records in UK Cyberattack

The U.K. retail giant Co-op confirmed that hackers stole the personal data of all 6.5 million of its members during a cyberattack in April, which included names, addresses, and contact information but did not involve financial or transaction data. The Co-op shut down its network before the hackers could deploy ransomware, but the incident caused widespread internal disruptions across its stores and back offices. This breach was part of a larger hacking campaign targeting prominent U.K. retailers like Marks & Spencer and Harrods, attributed to the Scattered Spider hacking group known for deceiving IT support teams. Four individuals, including teenagers, were arrested in connection with these attacks, which have since shifted focus to airlines, transportation, and insurance sectors. The Co-op lacked cybersecurity insurance at the time of the breach, potentially exposing it to significant financial losses. In response, Co-op's CEO Shirine Khoury-Haq expressed deep regret, apologized to members, and committed to efforts aimed at preventing youth from becoming cybercriminals.