Skip to content
City PM
  • Germany
  • France
  • Europe
  • Markets
  • Business
  • Opinion
  • Germany
  • France
  • Europe
  • Markets
  • Business
  • Opinion
Wednesday 14 May 2025 8:48 am

Co-op: All forms of payment now working after cyber attack

By: Amber Murray

Retail Reporter

Add as a preferred source on Google
The Co-op shut down parts of its IT systems on April 30 after detecting a potential breach.
Chief executive Shirine Khoury-Haq said she was “devastated” by the impact of the incident on workers and members

The Co-op has told its customers that all forms of payments are now working at its stores and online while stock levels should improve by this weekend.

The Manchester-headquartered group, which operates almost 2,400 stores around the UK, said it is in “the recovery phase” after suffering a significant cyber attack which caused two weeks of payment and stock issues.

On 30 April, the Co-op shut down parts of its IT systems and suspended contactless payments at around 10 per cent of stores after detecting a potential breach.

“Following the malicious third-party cyber-attack, we took early and decisive action to restrict access to our systems in order to protect our Co-op,” a spokesperson for the company said.

“We are now in the recovery phase and are taking steps to bring our systems gradually back online in a safe and controlled manner,” it added.

Co-op targeted by same group behind M&S and Harrods attacks

The company said its stock ordering system, which had caused issues with food availability at some of its stores, was now “fully back online” with choice at stores to improve this weekend.

“We’d like to thank all our colleagues, members, partners and suppliers for their support so far. We will provide further updates to our members as we continue to make progress from this cyber-attack,” the spokesperson added.

It is likely that the Co-op attack was conducted by the same group as the M&S and Harrods attacks, with hackers able to access systems through a shared third-party supplier or an employee phishing scam.

While Harrods was able to mitigate its attack, M&S told markets yesterday that some customer data was stolen during its attack – although it said the data did not include useable payment details or account passwords.

Cyber crime experts have told online shoppers to stay vigilant amid the attacks, with a high likelihood for phishing scams using stolen information.

Read more

East of England Co-op Eliminates Downtime Across 200 Sites with TNS Secure SD-WAN

Share this article

  • Facebook
  • X
  • LinkedIn
  • WhatsApp
  • Email

Similarly tagged content:

Sections

  • News

Categories

  • Retail
  • Business

People & Organisations

  • Co-op
  • customer data
  • cyber attack
  • Ecommerce
  • harrods
  • Payments

Trending Articles

  • Revealed: Secret Treasury plan to tax State Pension before it is paid out

  • Two solicitors linked to Post Office scandal charged with misconduct

  • Burnham’s new chief of staff ran City firm advising Thames Water and rival Heathrow bidder

  • Barclays and Lloyds join banking sector plan for digital ID

  • Reeves’ new tax charge on cash ISAs faces fierce industry backlash

More from City PM

  • East of England Co-op Eliminates Downtime Across 200 Sites with TNS Secure SD-WAN

    Business Wire
  • The Debate: Should CEOs be held personally accountable for cyberattacks?

    Opinion
    Evil-looking keyboard symbolizing cybersecurity threats and hacking risks in a digital landscape.
  • Jaguar Land Rover eyes cost-cutting and wealthy buyers in cyber attack recovery

    Retail
    JLR logo prominently displayed in an automotive business setting, highlighting the companys brand presence and identity
  • Gambit Cyber Launches Vizier AI – An Autonomous Security Intelligence Workspace for Continuous Exposure Management

    Business Wire
  • TG Jones owner Modella puts jobs at risk in shoe retailer overhaul

    Retail
    High streets emptied out as retail sales fell in May.
  • ‘Act now’: AI models capable of attacks on governments months away, Five Eyes warn

    Tech
    GettyImages 158774123 showcases a relevant business meeting scene, highlighting diverse professionals engaged in discussion.
  • Professional services firms the ‘flavour of the month’ for cyberattacks

    Prof Services
    The ICO said it initially planned to fine Capita a total of £45m, but this was later reduced by “mitigating factors”
  • Trump to reject UK plea over Anthropic ban as AI ‘kill switch’ fears grow

    Tech
    Getty Images logo on a modern office building exterior, symbolizing global influence in media and stock photography industry

City PM — European politics, business and analysis.

Europe

  • Germany
  • France
  • Europe
  • UK & Ireland

Topics

  • Business
  • Markets
  • AI
  • Technology
  • Opinion
  • Energy

More

  • Politics
  • Economics
  • Fintech
  • Legal
  • Sport
  • Life

Company

  • About City PM
  • Contact
  • Terms of Use
  • Privacy Policy
  • Cookie Policy
© 2026 City PM. All rights reserved.
About · Contact · Terms · Privacy