'They yanked their own plug': How Co-op averted an even worse cyber attack 14 May 2025 Share Save Joe Tidy Cyber correspondent, BBC World Service Share Save EPA Co-op narrowly averted being locked out of its computer systems during the cyber attack that saw customer data stolen and store shelves left bare, the hackers who claim responsibility have told the BBC. The revelation could help explain why Co-op has started to recover more quickly than fellow retailer M&S, which had its systems more comprehensively compromised, and is still unable to carry out online orders. Hackers who have claimed responsibility for both attacks told the BBC they tried to infect Co-op with malicious software known as ransomware - but failed when the firm discovered the attack in action. Both Co-op and M&S declined to comment. The gang, using the cyber crime service DragonForce, sent the BBC a long, offensive rant about their attack. In it, they expressed anger that Co-op's IT team made the decision to take computer services offline, preventing the criminals from continuing their hack. "Co-op's network never ever suffered ransomware. They yanked their own plug - tanking sales, burning logistics, and torching shareholder value," the criminals said. Cyber experts like Jen Ellis from the Ransomware Task Force said the response from Co-op was sensible. "Co-op seems to have opted for self-imposed immediate-term disruption as a means of avoiding criminal-imposed, longer-term disruption. It seems to ha