Co-op boss admits all 6.5m members had data stolen in cyber attack |
The Co-op has confirmed that all 6.5m of its members had their personal data stolen in a cyber attack earlier this year. CEO Shirine Khoury-Haq said that names, addresses, and contact details were accessed, but no financial or transaction data was compromised. Previously, the company had only said that a “significant number” of its customers' data had been accessed by the hackers, but did not give a precise figure. The breach, which occurred in April, disrupted IT systems, caused store supply issues and forced funeral services to temporarily revert to paper records. Co-op executives told MPs recently that many of its systems were protected from attack because it had defences in place which detected unusual behaviour within a few hours. The company is however not expecting to make “any significant recovery” of the costs of the hack from insurers as it chose to invest in detection systems rather than cyber insurance policies. Meanwhile, the Co-op has partnered with social impact business The Hacking Games to address cybercrime by guiding young people towards ethical careers in cybersecurity. The partnership will first be implemented within the Co-op Academies Trust, which serves 20,000 students. Research suggests that more than two-thirds (69%) of European teenagers have engaged in some form of cybercrime, underscoring the importance of redirecting these skills. Fergus Hay, chief executive of The Hacking Games, remarked: "There is an incredible amount of cyber talent out there – but many young people don't see a path into the industry."