- Personal information of all 6.5 million members of the cooperative was stolen
- The news was confirmed by the CEO of the Shirin Khoury-haq cooperative
- The cyber attack also affected Harrods and M&S
Personal information from all 6.5 million members of the Cooperative in the United Kingdom was confirmed would have been stolen from the cyber attack that targeted the supermarket, confirmed its CEO.
The flight was confirmed by the CEO of the Shirine Khoury-haq cooperative on BBC breakfastWho said, “It injured my members, they took their data and it injured our customers and that I take personally.”
“I am devastated that information has been taken. I am also devastated by the impact it took on our colleagues and they tried to contain all of this,” she added.
Details of the stolen cooperative client
“There were no financial data, no transaction data, but it was names and addresses and contact details that were lost,” continued Khoury-Haq, adding that she was “incredibly sorry” about the attack.
The cooperative, Harrods and M&S were struck by an important cyber attack in spring 2025, with online orders and websites, and significant disturbances of actions and purchases for weeks later.
The members of the cooperative pay fees to join, and then receive a share of the profits that the company achieves each year.
Khoury-Haq added during the attack that she met computer staff trying to resolve the damage and withdraw attacks from cooperative systems. “I will never forget the eyes of their faces, trying to fight these criminals,” she added.
Vonny Gamot, head of EMEA at McAfee, provided Techradar Pro some tips on how affected people can better protect themselves:
- “Suppose you are assigned – even if you have not yet received a coop notification, suppose that your information may have been compromised.”
- “Change your passwords immediately – start with your cooperative account, then go to all accounts that share the same password. Use solid and unique passwords for each account. This is not negotiable. In 2025, reuse of password is one of the fastest means to transform a single violation into several compromise accounts.”
- “Activate authentication with two factors everywhere – if you have not already done so, activate two -factor authentication (2FA) on all the accounts that take care of it, starting with emails, banks and commercial accounts. This adds a second layer of crucial safety.”
- “Monitor your financial accounts – Check bank statements, credit card invoices and investment accounts for any unusual activity. Configure account alerts if you have not already done so, many financial institutions offer real -time transaction notifications.”
- “Consider the online protection tools that can protect your information with the first alerts that show you if your data is on the Dark Web Web. The McAfee scam detector can also alert you to text messages and suspicious emails you receive, which is particularly precious in the event of a violation when criminals often launch targeted phishing campaigns using stolen contact information.”