Co-op Implements Strict Security Measures Amid Ongoing Cyber Attack

The Co-operative Group (Co-op) is responding to an ongoing cyber attack by instructing its 70,000 employees to adopt heightened security measures during remote work. An internal email, confirmed by Co-op and first reported by ITV News, advised staff to keep their cameras on during Teams meetings, verify all participants, and refrain from recording or transcribing calls. These actions aim to ensure that no unauthorized individuals are accessing internal communications. The company has also shut down remote access to internal systems and VPN-requiring applications, directing staff to work from Co-op locations if access to such tools is necessary.

Although the company maintains that the attack is under control and its measures are precautionary, the situation reflects growing concerns in the retail sector. Co-op’s response comes as Marks & Spencer grapples with a major ransomware attack attributed to the DragonForce group, potentially linked to a cybercrime spin-off called Scattered Spider. The National Cyber Security Centre has urged all UK retailers to remain alert, even though there is no indication of a coordinated targeting campaign.

Past incidents involving the Lapsus$ group have shown how attackers can infiltrate internal messaging platforms and extract sensitive data. Security experts note that visible presence in meetings is a tactic to prevent impersonation during virtual calls, a known technique of cybercriminals. The Metropolitan Police is currently investigating the M&S incident, highlighting the growing threat posed by organized cybercrime groups.