UK Retailer Co-op Shuts Down IT Systems After Cyber Attack Attempt

The Co-operative Group, one of the UK’s largest retailers, has been forced to shut down parts of its IT infrastructure after detecting an attempted cyber attack, just days after a major ransomware incident crippled rival Marks & Spencer (M&S). The pre-emptive shutdown, which began over the weekend, affected back-office systems, call centre operations, and virtual […] The post UK Retailer Co-op Shuts Down IT Systems After Cyber Attack Attempt appeared first on Cyber Security News.

Apr 30, 2025 - 15:28

UK Retailer Co-op Shuts Down IT Systems After Cyber Attack Attempt

The Co-operative Group, one of the UK’s largest retailers, has been forced to shut down parts of its IT infrastructure after detecting an attempted cyber attack, just days after a major ransomware incident crippled rival Marks & Spencer (M&S).

The pre-emptive shutdown, which began over the weekend, affected back-office systems, call centre operations, and virtual desktops, but Co-op assured that all its food stores, home delivery services, and funeral homes continue to operate as normal.

In a statement to staff and the public, Co-op confirmed it had “recently experienced attempts to gain unauthorised access to some of our systems.” The company said it “took swift action to protect our systems,” including temporarily suspending access to certain platforms to contain the threat.

“We are working hard to reduce any disruption to our services and would like to thank our colleagues, members, partners, and suppliers for their understanding during this period,” a spokesperson said.

Crucially, Co-op emphasized that there is no evidence customer data has been accessed or compromised, and it is not asking customers or members to take any action at this time.

The company has brought in external cybersecurity experts and is working closely with law enforcement and the National Cyber Security Centre as investigations continue.

The impact of the shutdown has been largely contained to internal functions. Employees reported having to manually check fresh produce in stores due to loss of access to digital date-tracking tools, and some staff faced difficulties with IT processes such as onboarding new hires.

However, the retailer’s core operations, including more than 2,300 supermarkets and over 800 funeral parlours, remain unaffected for customers.

This incident comes as M&S, another major UK retailer, continues to grapple with the fallout from a ransomware attack attributed to the hacking group Scattered Spider. That attack, which began over the Easter weekend, has halted online orders, disrupted contactless payments, and led to empty shelves and significant financial losses for M&S.

While there is no confirmed link between the two incidents, cybersecurity analysts note the timing raises concerns about coordinated threats targeting the UK retail sector.

The attacks have heightened anxiety within the industry over the vulnerability of digital infrastructure. Scott Dawson, CEO of payment processor DECTA, warned, “Retailers can no longer afford to treat resilience as optional,” and called for standardized resilience metrics and proactive recovery strategies to prevent lasting damage to customer trust.

As investigations continue, Co-op’s rapid response is being seen as a critical move to prevent a more damaging breach. The retailer has pledged to provide updates as necessary and is focused on restoring full IT functionality while maintaining uninterrupted service for its customers.

Are you from the SOC and DFIR Teams? – Analyse Malware Incidents & get live Access with ANY.RUN -> Start Now for Free.

The post UK Retailer Co-op Shuts Down IT Systems After Cyber Attack Attempt appeared first on Cyber Security News.