The Scattered Spider attack has left a major mark on the UK’s Co-operative Group. The April 2025 cyber incident cost the retailer $107 million, disrupted its operations, and compromised the data of 6.5 million members. The company continues to recover while warning of more financial strain ahead.
The Financial Impact
Co-op reported losses of £80 million (about $107 million) in operating profit for the first half of 2025. Around £20 million came from one-time response costs, including system rebuilds and crisis management. Another £60 million resulted from lost sales during weeks of disruption.
Revenue also dropped by £206 million (about $277 million) as systems went offline. Executives warned of further losses of at least £20 million expected in the second half of the year as recovery continues.
How the Attack Unfolded
The attack began in April when Co-op detected suspicious activity. To contain the incident, the company shut down large parts of its IT network. This decision limited further compromise but caused major disruption to supply chains, inventory, and call centers.
No ransomware was deployed to encrypt files. Instead, hackers exfiltrated personal details from 6.5 million members, including names and contact information. The lack of encryption did not reduce the damage, as stolen data still carries lasting risks for members.
Scattered Spider’s Role
Investigators linked the breach to Scattered Spider, a cybercrime group associated with the DragonForce ransomware operation. The group is known for social engineering, SIM-swapping, and targeting large enterprises.
The attack on Co-op forced IT teams to rebuild domain controllers, migrate systems, and reroute inventory. Staff had to rely on manual processes to keep stores supplied, which led to further delays and losses.
Law Enforcement Response
The UK’s National Crime Agency confirmed that four young suspects, aged 17 to 20, were arrested in connection with the incident. Authorities are continuing to investigate whether the group was directly involved in the attack or acted as affiliates.
Conclusion
The Scattered Spider attack shows how cybercrime can cripple even established organizations. Co-op faces long-term financial and reputational damage as it works to recover systems and protect members. The case underlines the need for businesses to invest in resilience, incident response, and strong security practices to withstand the growing threat of advanced cybercrime groups.
0 responses to “Scattered Spider Attack Costs Co-op $107 Million”