Just days after the Marks & Spencer cyberattack, the Co-operative Group (Co-op) discovered hackers trying to breach its systems . Co-op acted immediately \u2013 it pre-emptively shut down parts of its IT network to contain the threat . Thanks to this swift move, Co-op\u2019s stores stayed open and customer-facing services weren\u2019t disrupted, aside from some back-office systems going offline. This proactive response likely prevented a serious breach. For small businesses in Liverpool, Wirral, and North Wales, Co-op\u2019s close call is a powerful reminder that acting fast can make all the difference in cybersecurity.<\/p>\n\n\n\n
On April 30, 2025, Co-op executives informed staff that they had detected attempts to gain unauthorized access to the company\u2019s systems . In response, Co-op promptly disconnected certain internal systems (essentially \u201cpulling the plug\u201d on parts of its network) as a precaution . This included taking some inventory and remote-work systems offline to stop the hackers in their tracks . A few employees temporarily lost remote access, but importantly, customer services \u2013 from grocery stores to home deliveries \u2013 continued as usual .<\/p>\n\n\n\n
The National Cyber Security Centre (NCSC) worked with Co-op to investigate and to examine links to the M&S incident . Security experts noted that two major retailers facing cyber attacks in the same week was likely no coincidence . In Co-op\u2019s case, the quick defensive measures paid off: the company found no evidence that any customer data was accessed and assured customers they didn\u2019t need to do anything differently . In short, what could have been a catastrophic breach was reduced to a minor inconvenience.<\/p>\n\n\n\n
The Co-op incident highlights several key lessons for businesses of all sizes:<\/p>\n\n\n\n
Detect and Act Fast:<\/strong> Speed is everything. Co-op\u2019s IT team spotted unusual activity and reacted immediately. Early detection let them isolate the threat before it spread. Set up security alerts (for example, for strange login attempts or spikes in network activity) and have a plan to respond the moment something looks wrong. <\/p>\n\n\n\n The faster you react to a cyber threat, the less damage it can do. <\/p>\n\n\n\n Don\u2019t Hesitate to Pull the Plug:<\/strong> Co-op wasn\u2019t afraid to \u201cpull the plug\u201d on some systems to protect the rest . It\u2019s better to endure a short outage on a few tools than to risk a full-blown breach. If you suspect a particular computer or software is compromised, don\u2019t hesitate to disconnect it from your network \u2013 you can always restore it once things are secure. <\/p>\n\n\n\n Plan for Continuity:<\/strong> Co-op\u2019s proactive shutdown didn\u2019t cripple its operations because they had backup ways to work. This is a reminder to plan how your business would run if your primary systems went down. Could you still process sales or access important information? Keeping offline backups of critical data and having manual workarounds (even if they\u2019re slower) can keep you going during a cyber emergency. <\/p>\n\n\n\n Have a Response Plan:<\/strong> Co-op had clear steps to follow when a threat was detected \u2013 and they executed them calmly and effectively. Every small business should have an incident response plan defining who to call (IT support, cybersecurity provider, etc.), how to isolate affected systems, and how to communicate with your team and customers. Practice this plan, too. When an attack happens, there\u2019s no time to scramble; everyone should know their role and act without delay.<\/p>\n\n\n\n The biggest takeaway from Co-op\u2019s experience is that proactive defense works. It\u2019s not about panic \u2013 it\u2019s about preparation. Start by figuring out what sensitive data and systems your business has, and put strong protections around them (encryption, strong passwords, backups, etc.). Don\u2019t assume it \u201cwon\u2019t happen to you\u201d \u2013 in fact, 42% of small businesses in the UK suffered a cyber incident in the past year . And those that get hit often struggle to survive: roughly 60% of small companies close within six months of a severe cyberattack .<\/p>\n\n\n\n Investing in security now is far cheaper than dealing with a breach later. Make sure your software is kept up to date with patches, use multi-factor authentication on accounts, and back up your data regularly \u2013 these simple steps can thwart many attacks or at least limit the damage. It\u2019s also worth getting a professional cybersecurity assessment to evaluate your defenses. <\/p>\n\n\n\n A local expert \u2013 for example, Hilt Digital, a Wirral-based IT support and cybersecurity provider \u2013 can identify weak points and help set up proper safeguards.<\/p>\n\n\n\n Finally, when something does seem wrong, don\u2019t wait. As Co-op demonstrated, a decisive response can turn a looming disaster into a manageable event. Cyber threats are a reality of doing business today, but with the right preparation and quick action, you can protect your company and stay one step ahead of the attackers.<\/p>\n\n\n\n <\/p>\n","protected":false},"excerpt":{"rendered":" Unlike others, Co-op stopped a cyberattack in its tracks thanks to fast, smart action. Here\u2019s what every small business in the region should learn from their response\u2014and how to stay one step ahead of hackers.<\/p>\n","protected":false},"author":2,"featured_media":2439,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[40],"tags":[],"class_list":["post-2433","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog"],"yoast_head":"\nStaying One Step Ahead<\/h2>\n\n\n\n