Brutkey

Kevin Beaumont
@GossiTheDog@cyberplace.social

Co-op finally admitted the entire membership database was stolen

I had this in the thread months ago, they originally tried to deny it entirely then tried to say ‘some’ data was accessed when they knew it was the whole thing.

https://www.bbc.co.uk/news/articles/cql0ple066po

Kevin Beaumont
@GossiTheDog@cyberplace.social

Personally I think Co-op did a really good job getting out of that situation and minimising impact.

I definitely think if you have a LAPSUS$ style advanced persistent teenagers situation, tilt towards open and honest comms as those kids will use secrecy against ya. It’s 2025, it’s okay to say you got hacked, people largely understand. Also, in IR, lawyers are usually stuck in 1980 advice - it’s just advice, they ain’t yo boss.

Kevin Beaumont
@GossiTheDog@cyberplace.social

The people arrested as part of the Co-op and M&S hack investigation have been released on bail.

https://nation.cymru/news/four-people-bailed-after-arrests-over-cyber-attacks-on-ms-co-op-and-harrods/

Previously when this happened with LAPSUS$, they just continued hacking stuff.

Kevin Beaumont
@GossiTheDog@cyberplace.social

I understand the people released have not been charged.

Kevin Beaumont
@GossiTheDog@cyberplace.social

M&S still working on system recovery. https://www.bbc.com/news/articles/cewyyjdzql4o