Fri, 02 May 2025

Fri, 02 May 2025 Co-op cyber attack affects customer data, firm admits, after hackers contact BBC

The firm previously said there was "no evidence that customer data was compromised".

* Cyber hackers, using the name DragonForce, claim they have compromised the personal data of 20 million people who signed up to Co-op's membership scheme.
* The hackers contacted the BBC with proof of their infiltration and claimed to have stolen huge amounts of customer and employee data from Co-op's IT networks.
* Co-op had previously downplayed the severity of the hack, saying it was having only a "small impact" on its operations and that there was no evidence of customer data being compromised.
* However, the hackers claim to have private information including names, contact details, membership card numbers, emails, and phone numbers for 20 million people.
* The hackers also shared databases with the BBC containing usernames and passwords of all employees, as well as a sample of 10,000 customers' data.
* Co-op has confirmed that the hack was more severe than initially admitted, but would not confirm the number of affected individuals.
* DragonForce is also claiming responsibility for ongoing attacks on M&S and an attempted hack on Harrods.
* The hackers are using the name "DragonForce" to extort money from Co-op, but refused to say what they plan to do with the data if they don't receive payment.
* Government minister Pat McFadden has warned companies to prioritize cyber security in light of these attacks.
* Co-op is working with the NCSC and NCA to investigate and mitigate the effects of the hack.
  >>