How Much Did The Co-Op Cyberattack Actually Cost?

The Co-operative Group experienced a significant cyber attack in April, resulting in a substantial downturn in its financial performance for the first half of 2025. The retailer reported an £80 million reduction in earnings, leading to a £75 million underlying pre-tax loss for the six months ending on Sat, Jul 5, 2025, compared to a £3 million profit in the previous year. These figures were disclosed in the Co-op's half-year financial results.

The attack led to a £206 million decrease in sales, as system shutdowns disrupted operations, causing empty shelves and payment issues across its business divisions, including food retail, funerals, legal services, and insurance. The disruption resulted in an £80 million decline in operating profit, leaving the group with £32 million in underlying operating losses, down from a £47 million operating profit the previous year.

The Co-op described the attack as "sophisticated" and took immediate action to shut down several systems to prevent further ransomware installation, although this caused significant short-term disruption.

The Co-op has projected the total financial impact for the full year at approximately £120 million, combining the £80 million hit in the first half with an anticipated £40 million in the second half as operations stabilize. Despite easing disruptions, the company continues to face reduced customer numbers in convenience stores and ongoing recovery in some back-office functions. The financial impact is expected to be less severe in the second half, but the yearly earnings have already been affected.

The financial strain has postponed expansion plans, although 30 new food store openings are planned for the second half.

The attack's immediate consequences for customers included empty shelves and failed card payments. The Co-op prioritized deliveries to rural "lifeline" stores to ensure food availability and maintained essential services such as its funeral business during the disruption.

Members experienced a data breach when hackers accessed the data of all 6.5 million members by impersonating employees. Although ransomware was not installed, hackers copied a company file. In response, the Co-op offered a £10 discount on a £40 purchase once normal trading resumed and supported independent co-op societies and franchise partners affected by the disruption.

Chairwoman Debbie White acknowledged the incident as a challenging period in the group’s history and commended the efforts of the 53,000 staff members who maintained services. She emphasized the group's strong balance sheet, which enabled continued service to members and communities.

Chief Executive Shirine Khoury-Haq noted that the incident highlighted both strengths and weaknesses in the business, leading to structural changes in the food business and the establishment of a new commercial and logistics division. The leadership team has also been restructured to facilitate recovery.

The Co-op was not the only retailer affected by cyber attacks. Marks & Spencer also experienced a disruption, with online orders halted for six weeks following Easter, resulting in a profit impact of up to £300 million. These incidents demonstrate the vulnerability of high street retailers to cybercrime, with both companies incurring long-term costs and immediate sales losses. The Co-op's estimated financial impact of around £120 million, although less than that of Marks & Spencer, remains significant for a member-owned business operating on relatively thin margins.

Based on reporting by techround.co.uk.