Co-op boss confirms all 6.5m members had data stolen
3 hours ago Share Save Joe Tidy Cyber correspondent, BBC World Service Imran Rahman-Jones Technology reporter Share Save
Watch: Co-op boss says immediate action was taken when the data breach was discovered
The chief executive of Co-op has confirmed that all 6.5 million of its members had their data stolen in a cyber-attack on the retailer in April. "I'm devastated that information was taken. I'm also devastated by the impact that it took on our colleagues as well as they tried to contain all of this," Shirine Khoury-Haq told BBC Breakfast in her first public interview since the hack. "There was no financial data, no transaction data but it was names and addresses and contact information that was lost," she added. Ms Khoury-Haq said that she was "incredibly sorry" for the attack and that it was "personal" to her because of the impact that it had on her colleagues.
"Early on I met with our IT staff and they were in the midst of it. I will never forget the looks on their faces, trying to fight off these criminals," she said. The hackers were removed from the systems but "could not erase what they did so we could monitor every mouse click," and Co-op was able to send that information to authorities. But she added: "We know a lot of that information is out there anyway, but people will be worried and all members should be concerned." Co-op runs on a membership scheme, where members are paid a share of the profits of the co-operative. "It hurt my members, they took their data and it hurt our customers and that I do take personally," Ms Khoury-Haq said. Co-op has not put a figure on how much the hack will cost them, but it says it is still working to restore back-end systems. One of its responses to the hack is to partner with a cyber-security recruitment company. The Hacking Games identifies young talent to channel their skills into legal careers. "The research shows that if you offer these kids talent development opportunities and career opportunities, the vast majority of them will take the legitimate pathway," said its chief executive Fergus Hay. It is planning a pilot programme with Co-op Academies Trust, which runs 38 schools in England.
What happened in the cyber-attacks?