Co-op CEO Apologizes for Cyber-Attack Affecting 6.5 Million Customers

Strategic Insights -

Co-op members are reeling from a massive cyber-attack that saw the theft of their personal data, including names, addresses, and contact information. The attack, which occurred in April, has left the company scrambling to inform its 6.5 million members about the breach. Despite assurances that no financial information was stolen, the incident has raised concerns about the vulnerability of customers' sensitive data.

Key Takeaways:

  • The cyber-attack on the Co-op resulted in the theft of personal data from 6.5 million customers, including names, addresses, and contact information.
  • The attack occurred in April, but the company only recently revealed the full extent of the breach.
  • CEO Shirine Khoury-Haq apologized to customers, acknowledging that the incident "hurt my members" and that she takes it "personally."
  • The company had defended its systems from further attack, but admitted it was not expecting to recover any significant costs from insurers due to its decision to invest in detection systems.
  • Four people, including three teenagers, were arrested in connection with the cyber-attack as part of a broader investigation into the involvement of Scattered Spider, a loose collective of hackers.
  • The Information Commissioner's Office has advised customers to visit their website for advice and support on protecting their personal data.

Statistics:

  • 6.5 million: The number of Co-op customers affected by the cyber-attack.
  • April: The month in which the cyber-attack occurred.
  • 2,000: The number of grocery stores owned by the Co-op.
  • 800: The number of funeral parlors owned by the Co-op.
  • 2023: The year in which WH Smith was hit by a cyber-attack resulting in the theft of employee data.

Sources:

  • BBC News (202?): Shirine Khoury-Haq apologizes after Co-op cyber hack (exact date not provided).
  • The Guardian (202?): Co-op says 6.5 million customers' data stolen in cyber-attack (exact date not provided).
  • National Crime Agency: Scattered Spider (no date provided).
  • Information Commissioner's Office: Advice and support for personal data breaches (no date provided).