6.5 million people's data stolen in co-op hack

The chief executive of Co-op has revealed that all 6.5 million of its members had their data stolen in April's cyber-attack.

Shirine Khoury-Haq told BBC Breakfast that names, addresses and contact information was lost, but not financial data or transaction data.

She apologised for the attack and said: "I'm devastated that information was taken. I'm also devastated by the impact that it took on our colleagues as well as they tried to contain all of this."

Four people have been arrested as part of a National Crime Agency investigation into cyber attacks targeting Co-op, M&S and Harrods.

Two 19-year-old males, a 17-year-old males and a 20-year-old female were arrested in the West Midlands and London last week on suspicion of Computer Misuse Act offences, blackmail, money laundering and participating in the activities of an organised crime group. They have since been bailed.

In response to the hack, Co-op has now partnered with the Hacking Games to help prevent future cybercrime.

The partnership will combine Co-op's reach into every post code area of the UK, community expertise, 38 Co-op Academy schools and their 6.5 million member base with The Hacking Games’ knowledge and expertise in cybercrime. 

The hacking games is connecting the cybersecurity industry with unconventional talent. Co-op wants to help prevent cybercrime before it starts by supporting young people to put their skills to good use.

Shirine Khoury-Haq, Group CEO of Co-op, said: “We know first-hand what it feels like to be targeted by cybercrime. The disruption it causes, the pressure it puts on colleagues, and the impact it has on the people and communities we serve.

“At Co-op, we can’t just stand back and hope it doesn’t happen again - to us or to others. Our members expect us to find a cooperative means of tackling the cause, not just the symptom. Our partnership with The Hacking Games lets us reach talented young people early, guide their skills toward protection rather than harm, and open real paths into ethical work. When we expand opportunity we reduce risk, while having a positive impact on society.”

Security Minister Dan Jarvis, said: “Cybercrime destroys lives. The criminals carrying out these acts put the public and the economy at risk, and that’s why we’re continuing to take the decisive action necessary to keep UK jobs and businesses safe.

“With just over four in ten businesses reported having experienced any kind of cyber security breach or attack in the last 12 months, it is vital we inspire the next generation of cyber experts to detect, disrupt, and tackle cybercrime, and to support our economy to grow, as part of the government’s Plan for Change.

“Combatting this issue will take a whole-of-society approach and we applaud all efforts to ensure that young people are diverted away from illicit behaviour online.”