{"type":"rich","version":"1.0","provider_name":"Transistor","provider_url":"https://transistor.fm","author_name":"Daily Security Review","title":"Phished and Exposed: What the Co-op Hack Reveals About Retail Cybersecurity","html":"","width":"100%","height":180,"duration":1297,"description":"In April 2025, The Co-op—one of the UK’s largest retailers—confirmed a data breach that exposed the personal information of 6.5 million members. No financial data was taken, but the attack hit at the core of trust, with CEO Shirine Khoury-Haq calling it a “personal attack on our members and colleagues.”\nThis wasn’t just a technical failure—it was a masterclass in social engineering, executed by attackers linked to Scattered Spider and DragonForce ransomware. By impersonating staff and manipulating the IT helpdesk, the attackers gained privileged access and exfiltrated password hashes, enabling lateral movement and data theft without ever breaching a firewall.\nIn this episode:\nHow the attackers bypassed defenses using psychological manipulation—not malware\nThe role of DragonForce ransomware and why Scattered Spider keeps showing up in major breaches\nWhy social engineering remains the #1 cause of network compromise\nWhat retailers like Co-op and M&S are learning the hard way about helpdesk security, privileged accounts, and digital trust\nArrests made by the UK’s National Crime Agency and their connection to the MGM Resorts breach\nWe also dive into the broader context:\nWhy retail is an increasingly high-value target\nThe compliance landscape for UK retailers (GDPR, PCI DSS, Cyber Essentials)\nCritical mitigation strategies: phishing-resistant MFA, ZTNA, PAM, and resilient incident response plans\nThis is not just about one breach—it’s about how an entire sector can fall to a single phone call.","thumbnail_url":"https://img.transistorcdn.com/pL79_MJFeJHamQ_ztImsGmDSMdl27VMk_30TAkieujE/rs:fill:0:0:1/w:400/h:400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS8yNzg5/ZjlhNzM5Y2M4Njli/NjkxNzgyODA2Nzhi/MDI2ZC5wbmc.webp","thumbnail_width":300,"thumbnail_height":300}