Co-op continues recovery efforts following recent data security incident

UK-based retail chain Co-op said it is still working to recover from the data security incident it experienced earlier this month.

 

On May 2, a Co-op spokesperson revealed that the company was targeted by an attempted network intrusion where an unauthorised third party tried to breach the network with malicious intent.

 

“We have recently experienced attempts to gain unauthorised access to some of our systems. As a result, we have taken proactive steps to keep our systems safe, which has resulted in a small impact on some of our back office and call center services,” the spokesperson said.

 

In an update on May 14, a Co-op spokesperson said that while the company’s stock ordering system is back online and fully operational, “there will be improved stock availability in our Food stores and online from this weekend and we are working closely with our suppliers to restock our stores.

 

“Following the malicious third-party cyber-attack, we took early and decisive action to restrict access to our systems in order to protect our Co-op. 

 

“We are now in the recovery phase and are taking steps to bring our systems gradually back online in a safe and controlled manner,” the spokesperson added.

 

Co-op also confirmed that it is accepting all forms of payments including contactless, and chip and pin across all its stores.

 

A member of the “DragonForce” hacking group claimed responsibility for the cyber attack on Co-op and said it is also responsible for the recent attack on M&S.

 

Acknowledging the claims of the hacker group, a Co-op spokesperson said, “As a result of ongoing forensic investigations, we now know that the hackers were able to access and extract data from one of our systems.

 

“The accessed data included information relating to a significant number of our current and past members.

 

“This data includes Co-op Group members’ personal data such as names and contact details, and did not include members’ passwords, bank or credit card details, transactions or information relating to any members’ or customers’ products or services with the Co-op Group,” the spokesperson concluded.