All 6.5 million members of the Co-op had their personal data stolen in a major cyberattack in April, the retailer's chief executive Shirine Khoury-Haq has confirmed. While no financial or transaction data were taken, names, addresses, and contact information were accessed. The breach prompted the shutdown of IT systems, disrupting supply chains and payments. Khoury-Haq expressed deep sorrow, especially recalling the distress of IT staff working to repel the attackers. The attack was one of three targeting major UK retailers this spring, alongside Marks & Spencer and Harrods. Four suspects, aged 17 to 20, have been arrested under suspicion of offences including blackmail, money laundering, and cybercrime. Devices were seized from their homes. In response, the Co-op has partnered with The Hacking Games to help young people with cyber skills pursue careers in cybersecurity instead of crime. The breach underscores the growing vulnerability of digital infrastructure and the emotional toll such attacks take on staff and customers alike.