Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
Co-op did not say the April 2025 cyber attack cost £206m in cash or profit. The figure was its estimate of the attack’s adverse impact on first-half group revenue—effectively sales lost or affected by disrupted systems, stock availability and customer behaviour.
Co-op later estimated that the cyber incident had reduced full-year 2025 revenue by £285m and profitability by £107m.
What the £206m figure means
Co-op reported the £206m estimate on 25 September 2025 for the six months ended 5 July 2025. It represented the estimated reduction in first-half revenue caused by the April cyber attack, not a £206m repair bill, compensation payment or profit loss.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →| Measure | Estimate | What it means |
|---|---|---|
| First-half revenue impact | £206m | Sales or revenue adversely affected during the six-month period |
| Underlying margin impact | £60m | Profit contribution lost from disrupted trading |
| Incremental non-recurring costs | £20m | Direct costs linked to the incident |
| First-half operating-profit and cash impact | £80m | The £60m margin impact plus £20m of direct costs |
| Later full-year revenue impact | £285m | Co-op’s estimate for the whole of 2025 |
| Later full-year profitability impact | £107m | £86m of margin impact plus £21m of incremental costs |
The figures are therefore not interchangeable. Revenue is the money generated from sales; profit is what remains after costs. A business can lose £206m of revenue without losing £206m of profit.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Co-op’s half-year statement put the first-half operating-profit and cash effect at £80m. Its March 2026 trading update later gave the full-year estimates of £285m in revenue and £107m in profitability.
How the attack affected stores and trading
Co-op detected a malicious cyber attack in April 2025 and restricted access to systems to contain it. That defensive action helped prevent the deployment of ransomware and more serious systems damage, according to evidence later given to Parliament. However, limiting systems also disrupted parts of the business.
The food operation experienced problems with stock ordering, product availability, payment systems and store processes. Manual workarounds restricted transaction volumes, while stock losses and wastage increased. Some customers also changed where they shopped during and after the disruption, making the effect last beyond the initial systems response.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Co-op said all payment methods, including contactless and chip-and-pin, were working across its food estate by 14 May 2025, and that normal stock-ordering processes had resumed. The company continued to deal with the commercial consequences during the rest of the year.
The £20m of directly attributable first-half costs comprised:
- £7m of incremental stock losses;
- £6m of stock wastage;
- £5m of additional third-party and payroll costs; and
- £2m of bad-debt provisions.
These were separate from the larger revenue impact. The £206m included the effect of disrupted trading, while the £20m represented specifically identified additional costs.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Which Co-op operations were affected?
The most visible disruption was in food retail, but the wider group includes wholesale, franchise operations and life services. Co-op said essential services such as funerals continued.
Free tools Windows power users keep installed
One-click scans. No signup required.
It also prioritised stock for rural “lifeline” stores, redirected around 350,000 cases of stock to 209 independent society stores, and worked with franchise stores to resolve operational problems. Those measures show why the incident was not simply a matter of an online system going offline: suppliers, franchisees, independent co-operatives and local communities were also involved in the recovery.
What member data was accessed?
In its 2 May 2025 update, Co-op said attackers had accessed and extracted data from a system relating to a significant number of current and former members.
The company said the data included names and contact details. In evidence to the House of Commons Business and Trade Sub-Committee on 8 July, Co-op representatives described the copied information as including names, addresses, contact details and dates of birth.
Co-op said the affected information did not include:
- passwords;
- bank details;
- credit-card details;
- transactions; or
- information about members’ or customers’ products and services.
Names, addresses, contact details and dates of birth are still personal data and should not be dismissed as harmless. But the publicly disclosed information does not support claims that payment credentials, shopping histories or account passwords were stolen.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Claims that all 6.5 million members’ data was stolen should be treated carefully. The scope of the member database and the categories of data should be attributed to Co-op’s own statements rather than presented as a broader independently verified finding.
Was it a ransomware attack?
It is safer to describe the incident as a cyber attack or unauthorised-access incident. Co-op told Parliament that its response prevented ransomware from being deployed. That does not mean the attack was insignificant: the company still suffered extensive operational disruption and financial damage.
The incident occurred during a wider period of major cyber attacks affecting UK retailers, including Marks & Spencer. Parliament discussed the attacks together, but Co-op’s public disclosures did not establish definitive attribution to a named threat actor. References to groups such as Scattered Spider should therefore not be treated as confirmed facts without an authoritative attribution.
How did the incident affect Co-op’s reported results?
For the six months ended 5 July 2025, Co-op reported:
- group revenue of £5.484bn, down from £5.603bn;
- a statutory operating loss of £56m, compared with a £35m profit a year earlier;
- an underlying operating loss of £32m, compared with a £47m profit;
- an underlying pre-tax loss of £75m, compared with a £3m profit; and
- net debt excluding leases of £43m.
The cyber attack was a major contributor, but it was not the only reason for the losses. Co-op also cited wage and regulatory cost increases, other cost pressures and changes in the convenience-shopping market. The company later referred to approximately £150m of non-cyber cost headwinds in 2025.
Co-op’s earlier September assessment suggested that the full-year profit impact could reach about £120m, including any insurance recovery. The later £107m estimate reflected the company’s subsequent assessment of the whole year. These figures are not necessarily contradictory: the first was a forward-looking estimate made at the half-year stage, while the second came after more of the year’s trading had taken place.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
How Co-op responded
Co-op said it restricted systems, activated continuity arrangements and worked with the National Cyber Security Centre, the National Crime Agency and relevant regulators. It restored payment and stock-ordering processes in stages while maintaining essential services.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
The company also supported rural stores, independent co-operative societies and franchisees, and offered members a £10 discount on a £40 shop. It later partnered with The Hacking Games on longer-term cybercrime prevention.
Co-op said market share had returned to, or exceeded, pre-attack levels in every business area during 2026. That indicates operational recovery, but it does not erase the lost sales, additional costs or wider disruption recorded during 2025.
Why the headline needs qualification
“Co-op cyber attack damage cost £206m” is an understandable shorthand, but it is financially imprecise. It can suggest that Co-op paid £206m to repair its systems or lost £206m in profit. Neither is what the company reported.
The accurate formulation is that Co-op estimated the April 2025 attack had an adverse £206m impact on first-half revenue. The corresponding first-half impact on operating profit and cash was estimated at £80m, comprising £60m of lost margin and £20m of direct one-off costs.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchThe later full-year estimate is the more complete measure for the whole of 2025: £285m of revenue impact and £107m of profitability impact. Neither figure should automatically be described as the total economic cost to suppliers, customers, franchisees or local communities, because those wider effects are not all separately quantified in Co-op’s reported numbers.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
