All Co-op members had data stolen in cyber-attack

Co-op's chief executive has confirmed all 6.5 million of its members had their data stolen in the major cyber-attack on the retailer earlier this year.  

Speaking to the BBC, Shirine Khoury-Haq said cybercriminals had taken names, addresses and contact information, but confirmed no financial or transaction data had been accessed.  

The retailer runs on a membership scheme, meaning members are paid a share of the profits of the co-operative.  

Khoury-Haq said she was "incredibly sorry" for the attack, adding she was “devastated” by the impact it had had on customers and staff.   

“Early on, I met with our IT, staff and they were in the midst of it. I will never forget the looks on their faces, trying to fight off these criminals," she added.  

Co-op was one of three major retailers, alongside Marks & Spencer and Harrods, to be targeted by cybercriminals in April.   

Shortly after the attack, Co-op confirmed some employee and customer data had been stolen during the incident.   

Last week, the police arrested four people in connection to the attacks. Three men and a woman were detained on suspicion of Computer Misuse Act offences, and remain in custody.