Co-op data breach
Was I affected?
Co-op confirmed a breach affecting about 6.5 million people, exposing names, addresses, email addresses and phone numbers. You are affected if you were a Co-op member (membership card or app) as of April 2025.
| Announced | May 2, 2025 |
|---|---|
| When it happened | April 2025 |
| People affected | 6.5 million |
| Data exposed | Names, Addresses, Email addresses, Phone numbers and Dates of birth |
| Status | Confirmed by the company or a regulator filing |
What happened
The UK's Co-operative Group shut down parts of its IT in spring 2025 after attackers, later claimed by DragonForce, got in and copied its membership database. Chief executive Shirine Khoury-Haq said in July 2025 that data on all 6.5 million members was taken, including names, addresses, email, phone numbers and dates of birth. Co-op said no passwords, bank or card details or transaction records were stolen.
What should I do?
- Treat emails, texts and calls that mention Co-op membership, rewards or refunds as suspect; don't click links or share codes, and contact the company through its official app or website.
- Check your credit file with Experian, Equifax and TransUnion UK, and consider Cifas Protective Registration if you are worried about impersonation.
- Report scams or fraud to Action Fraud (actionfraud.police.uk) or call your bank on the number on your card.
Check the other services you use →
Sources
- Co-op confirms data of 6.5 million members stolen in cyberattack · BleepingComputer (news)
- Data of all 6.5 million Co-op members stolen - CEO says she is 'incredibly sorry' · TechRadar (news)