Cooperative, London. Credit: WD Stock Photo, Shutter Stock
Co-op CEO Shirine Khoury-Haq confirmed that a major cyber attack discovered in April 2025 caused personal data to be stolen by all 6.5 million members of the common.
“It hurt my members…and I’ll take it personally,” Khoury-Haq said. BBC, She added: “Incredibly sorry” for the violation.
The stolen information contained names, addresses and contact details, but no financial data such as card numbers or transactions were accessed. The cooperative initially reported that only a “slight” of members were affected.
The attack forced a group that owns more than 2,000 grocery stores and 800 funeral homes to close their IT systems. Some services returned to paper-based operations, leaving shelves empty due to disruption in the supply chain.
Last week, four people, including three teenagers, were arrested in connection with a cyberattack on Co-ops, M&S and Harrods. National Criminal Institutions are investigating potential links Scattered spiders, A group of English-speaking hackers.
The Intelligence Committee’s office is urging stakeholders to visit the website for support.
Should more UK companies be legally required to hold cyber insurance?
Check out all the UK news.
View all financial news.
