--- title: "Co-op Chair Resigns as the Cost of the 2025 Cyb… | Firevault" description: "The Co-op chairwoman Debbie White has stepped down with immediate effect, months after the resignation of chief executive Shirine Khoury-Haq. The mutual is…" lang: en-GB json-ld: | [ { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Protect what matters with Offline Secure Storage and control what moves with Control by Firevault. Physically disconnected, always reachable by you.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] } ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "knowsAbout": [ "Offline Secure Storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Protect what matters with Offline Secure Storage and control what moves with Control by Firevault. Physically disconnected, always reachable by you.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/news/coop-chair-resigns-cyberattack-2026#webpage", "url": "https://fire-vault.com/news/coop-chair-resigns-cyberattack-2026", "name": "Co-op Chair Resigns as the Cost of the 2025 Cyb…", "description": "The Co-op chairwoman Debbie White has stepped down with immediate effect, months after the resignation of chief executive Shirine Khoury-Haq. The mutual is…", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://fire-vault.com/__l5e/assets-v1/efc19641-f33f-4831-9f93-40adad1901a0/coop-chair-resigns-cyberattack-2026-boardroom.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/news/coop-chair-resigns-cyberattack-2026#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/news/coop-chair-resigns-cyberattack-2026#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Learn", "item": "https://fire-vault.com/learn" }, { "@type": "ListItem", "position": 3, "name": "Knowledge Vault", "item": "https://fire-vault.com/learn/knowledge" }, { "@type": "ListItem", "position": 4, "name": "Co-op Chair Resigns as the Cost of the 2025 Cyberattack Reaches the Boardroom", "item": "https://fire-vault.com/news/coop-chair-resigns-cyberattack-2026" } ] }, { "@context": "https://schema.org", "@type": "NewsArticle", "headline": "Co-op Chair Resigns as the Cost of the 2025 Cyberattack Reaches the Boardroom", "description": "The Co-op chairwoman Debbie White has stepped down with immediate effect, months after the resignation of chief executive Shirine Khoury-Haq. The mutual is still absorbing the fallout from a 2025 cyberattack that cost it more than 200 million pounds in lost revenues.", "url": "https://fire-vault.com/news/coop-chair-resigns-cyberattack-2026", "image": [ { "@type": "ImageObject", "url": "https://fire-vault.com/__l5e/assets-v1/efc19641-f33f-4831-9f93-40adad1901a0/coop-chair-resigns-cyberattack-2026-boardroom.jpg", "width": 1200, "height": 1200 }, { "@type": "ImageObject", "url": "https://fire-vault.com/__l5e/assets-v1/efc19641-f33f-4831-9f93-40adad1901a0/coop-chair-resigns-cyberattack-2026-boardroom.jpg", "width": 1200, "height": 900 }, { "@type": "ImageObject", "url": "https://fire-vault.com/__l5e/assets-v1/efc19641-f33f-4831-9f93-40adad1901a0/coop-chair-resigns-cyberattack-2026-boardroom.jpg", "width": 1200, "height": 675 } ], "thumbnailUrl": "https://fire-vault.com/__l5e/assets-v1/efc19641-f33f-4831-9f93-40adad1901a0/coop-chair-resigns-cyberattack-2026-boardroom.jpg", "author": { "@type": "Person", "name": "Mark Fermor", "jobTitle": "Director & Co-Founder", "worksFor": { "@id": "https://fire-vault.com/#organization" }, "url": "https://fire-vault.com/why-oss/about" }, "publisher": { "@type": "NewsMediaOrganization", "name": "Firevault", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 600, "height": 60 } }, "datePublished": "2026-08-11T07:00:00+00:00", "dateModified": "2026-09-03T09:43:22.800479+00:00", "mainEntityOfPage": { "@type": "WebPage", "@id": "https://fire-vault.com/news/coop-chair-resigns-cyberattack-2026" }, "inLanguage": "en-GB", "articleSection": "Breach Analysis", "wordCount": 476, "keywords": "Co-op, Breach Analysis, data breach, cyber security, offline secure storage, data protection, physical air gap", "articleBody": "The Co-op chairwoman Debbie White has stepped down with immediate effect after two and a half years in the role, the latest in a growing list of senior departures from the mutual. Her exit was reported by The Times on 10 August 2026. What Happened White became chair in February 2024, succeeding Allan Leighton. She will be replaced on an interim basis by Moni Mannings, a senior independent director", "dateline": "United Kingdom", "speakable": { "@type": "SpeakableSpecification", "cssSelector": [ "h1", ".article-summary", "h2" ] }, "isAccessibleForFree": true, "copyrightHolder": { "@id": "https://fire-vault.com/#organization" }, "copyrightYear": 2026 }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "How much did the Co-op cyberattack cost?", "acceptedAnswer": { "@type": "Answer", "text": "The Co-op has attributed more than 200 million pounds in lost revenues to the 2025 cyberattack, according to reporting by The Times on 10 August 2026. That figure covers revenue lost while ordering, replenishment and back office systems were disrupted, and it does not include remediation, legal and reputational costs." } }, { "@type": "Question", "name": "Why is a cyberattack now a boardroom issue?", "acceptedAnswer": { "@type": "Answer", "text": "Because the consequences are financial and operational rather than technical. When an attack empties shelves, halts supply chains and removes a year of trading performance, accountability moves to the chair and the chief executive. Boards are increasingly judged on whether critical data and systems were designed to survive an intrusion, not on how quickly the incident was announced." } }, { "@type": "Question", "name": "How does Offline Secure Storage reduce this kind of disruption?", "acceptedAnswer": { "@type": "Answer", "text": "Offline Secure Storage keeps gold copies of the data a business needs in order to trade, such as supplier records, product and pricing files, configuration data and system images, physically disconnected at the hardware level. An attacker inside the online estate cannot read, encrypt or delete what is not connected, so recovery starts from a clean, verified copy rather than from a negotiation." } } ] } ] --- Recent Breaches Breaches [2026 PowerSchool 62.4M records ](/learn/breaches)[2026 DISA Global Solutions 3.3M records ](/learn/breaches)[2026 Globe Life 850K records ](/learn/breaches)[2026 Lidl GB Customer contact data ](/learn/breaches)[2026 Asahi Group Production systems disrupted ](/learn/breaches)[2026 Kido International 8K records ](/learn/breaches)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](/learn/breaches)[2026 Jaguar Land Rover Production and IT systems disru... ](/learn/breaches)[2026 Peter Green Chilled Order and logistics data ](/learn/breaches)[2026 Adidas UK Customer contact details ](/learn/breaches)[2026 PowerSchool 62.4M records ](/learn/breaches)[2026 DISA Global Solutions 3.3M records ](/learn/breaches)[2026 Globe Life 850K records ](/learn/breaches)[2026 Lidl GB Customer contact data ](/learn/breaches)[2026 Asahi Group Production systems disrupted ](/learn/breaches)[2026 Kido International 8K records ](/learn/breaches)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](/learn/breaches)[2026 Jaguar Land Rover Production and IT systems disru... ](/learn/breaches)[2026 Peter Green Chilled Order and logistics data ](/learn/breaches)[2026 Adidas UK Customer contact details ](/learn/breaches) [View All →](/learn/breaches) [![Firevault - offline secure storage, physically disconnected from the internet](/assets/logo-color-DBVl0KCg.png)](/) Products Solutions [Why OSS](/why-oss) More [Help](/help)[Get started](/get-started) Overview What HappenedWhy It MattersThe Firevault ViewMore Resources [Knowledge Vault](/learn/knowledge)/ [News](/learn/knowledge?filter=news) News · Breach Analysis · 11 August 2026 # Co-op Chair Resigns as the Cost of the 2025 Cyberattack Reaches the Boardroom The Co-op chairwoman Debbie White has stepped down with immediate effect, months after the resignation of chief executive Shirine Khoury-Haq. The mutual is still absorbing the fallout from a 2025 cyberattack that cost it more than 200 million pounds in lost revenues. ![Mark Fermor](/assets/mark-fermor-aWtKNSv7.jpg) Mark Fermor Director & Co-Founder, Firevault 3 min read Share [](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Ffire-vault.com%2Fnews%2Fcoop-chair-resigns-cyberattack-2026)[](https://twitter.com/intent/tweet?url=https%3A%2F%2Ffire-vault.com%2Fnews%2Fcoop-chair-resigns-cyberattack-2026&text=Co-op%20Chair%20Resigns%20as%20the%20Cost%20of%20the%202025%20Cyberattack%20Reaches%20the%20Boardroom%0A%0AThe%20Co-op%20chairwoman%20Debbie%20White%20has%20stepped%20down%20with%20immediate%20effect%2C%20months%20after%20the%20resignation%20of%20chief%20executive%20Shirine%20Khoury-Haq.%20The%20mutual%20is%20still%20absorbing%20the%20fallout%20from%20a%202025%20cyberattack%20that%20cost%20it%20more%20than%20200%20million%20pounds%20in%20lost%20revenues.)[](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Ffire-vault.com%2Fnews%2Fcoop-chair-resigns-cyberattack-2026)[](mailto:?subject=Co-op%20Chair%20Resigns%20as%20the%20Cost%20of%20the%202025%20Cyberattack%20Reaches%20the%20Boardroom&body=The%20Co-op%20chairwoman%20Debbie%20White%20has%20stepped%20down%20with%20immediate%20effect%2C%20months%20after%20the%20resignation%20of%20chief%20executive%20Shirine%20Khoury-Haq.%20The%20mutual%20is%20still%20absorbing%20the%20fallout%20from%20a%202025%20cyberattack%20that%20cost%20it%20more%20than%20200%20million%20pounds%20in%20lost%20revenues.%0A%0Ahttps%3A%2F%2Ffire-vault.com%2Fnews%2Fcoop-chair-resigns-cyberattack-2026) ![Empty boardroom in daylight with one chair turned away from the table, representing the Co-op chair standing down after the 2025 cyberattack.](/__l5e/assets-v1/efc19641-f33f-4831-9f93-40adad1901a0/coop-chair-resigns-cyberattack-2026-boardroom.jpg) Empty boardroom in daylight with one chair turned away from the table, representing the Co-op chair standing down after the 2025 cyberattack. Why it matters ## What this means for organisations holding critical data The Co-op chairwoman Debbie White has stepped down with immediate effect, months after the resignation of chief executive Shirine Khoury-Haq. The mutual is still absorbing the fallout from a 2025 cyberattack that cost it more than 200 million pounds in lost revenues. In this analysis 1. 01 [What Happened](#section-0) 2. 02 [Why It Matters](#section-1) **On this page**[What Happened](#section-0)[Why It Matters](#section-1) **The Co-op chairwoman Debbie White has stepped down with immediate effect** after two and a half years in the role, the latest in a growing list of senior departures from the mutual. Her exit was [reported by The Times](https://www.thetimes.com/article/19b2e6dc-b060-482d-9f1c-1648bbb19388) on 10 August 2026. ## What Happened White became chair in February 2024, succeeding Allan Leighton. She will be replaced on an interim basis by Moni Mannings, a senior independent director. Her departure follows the resignation of Shirine Khoury-Haq, who stepped down in March after four years as chief executive, and the exit of managing director Matt Hood earlier this summer as part of a wider shake-up. The Co-op is now searching for both a permanent chair and a permanent chief executive. The mutual had faced allegations of a toxic executive culture, which it did not accept, and was still absorbing the fallout from the 2025 cyberattack that cost it more than 200 million pounds in lost revenues. During that incident, shelves in Co-op stores were left empty as ordering and replenishment systems were taken offline. ## Why It Matters A cyberattack is no longer contained inside an IT function. It removes trading capacity, empties shelves, damages supplier confidence and eventually reaches the board. The Co-op case shows the full arc: an intrusion in 2025, a nine figure revenue impact, a period of cultural and operational strain, and by 2026 the departure of both the chief executive and the chair. The financial figure is the part that gets quoted, but the operational detail is the more instructive one. The business was not stopped because money was stolen. It was stopped because the data that tells a retailer what to order, where to send it and at what price was reachable from a compromised network. Once that data was unavailable or untrusted, thousands of stores could not trade normally. ## The Firevault View Retail runs on a small set of data that must be correct and available: supplier and contract records, product and pricing files, warehouse and logistics configuration, system images and backups. Almost none of that needs to be permanently reachable from a connected estate. It needs to be reachable by authorised people, at the moment they need it, and to be provably intact. [Offline Secure Storage](/offline-secure-storage)® keeps those gold copies physically disconnected at the hardware level. There is no network path to encrypt, exfiltrate or quietly corrupt, so an attacker who is already inside cannot reach them. Recovery becomes a controlled restore from a clean, verified copy rather than a negotiation conducted while stores stand empty. Boards should be asking a simpler question than which tool to buy next. Which of our data has no reason to remain permanently connected, and what happens to trading if the connected copy is lost tomorrow? Disconnect to Protect® is the answer to both. _Written by Mark Fermor, Director and Co-Founder of Firevault._ About the author ![Mark Fermor](/assets/mark-fermor-aWtKNSv7.jpg) ### Mark Fermor [](https://www.linkedin.com/in/mfermor) Director & Co-Founder Co-founder of Firevault, focused on offline secure storage and protecting individuals and businesses from fraud, fines, loss and damage. Speaker, owner and advisor. [![Firevault Bunker, the protected physical location for Offline Secure Storage hardware](/__l5e/assets-v1/75208f4e-fc6f-46d8-80b9-606c43dfef28/firevault-bunker-building.webp)](/why-oss) The Firevault view**Offline Secure Storage® keeps a clean copy beyond the reach of an attacker.**[Why #OSS →](/why-oss) [![The nine Control modules arranged around the Firevault platform](/__l5e/assets-v1/829a8768-a871-41d0-8a79-3645ca7f5e83/platform-wheel.jpg)](/solutions/control) Control systems and access**Cut the physical paths attackers and third parties depend on.**[Explore Control →](/solutions/control) [![Firevault 2TB Vault hardware](/__l5e/assets-v1/ed09bfc1-2f0f-491d-b1aa-861542a5fb33/hero-vault-2tb.png)](/get-started) Get started**Get started, or talk to a member of the team.**[Get started →](/get-started) How Firevault would handle this ## A recovery copy an attacker cannot reach Offline Secure Storage® keeps a clean copy of your data on hardware that is physically disconnected, so backup and recovery do not depend on systems an intruder can touch. [Get started](/get-started)[Talk to the team](/demo) **Hardware**Your copy sits on dedicated encrypted hardware **Disconnect**Offline by default, connected only when you say so **Recovery**A known-clean copy to rebuild from, on your timetable **Location**Held in a secure Firevault Bunker Related Reading ## You may also find these useful [ ![Trezor breach reaches 81,000 customers because a supplier never deleted the data](/images/news/trezor-shipmonk-data-breach-81000-customers-2026.jpg) Breach Analysis ### Trezor breach reaches 81,000 customers because a supplier never deleted the data A further 67,000 US customers who ordered between 2019 and 2021 were exposed, because Trezor's logistics provider kept data it had confirmed in writing it had deleted. 8 Sept 2026 3 min ](/news/trezor-shipmonk-data-breach-81000-customers-2026)[ ![Quinn Emanuel and McDermott breached as law firms become the soft route to client data](/images/news/law-firms-quinn-emanuel-mcdermott-data-breaches-2026.jpg) Breach Analysis ### Quinn Emanuel and McDermott breached as law firms become the soft route to client data Two more major US law firms have disclosed social engineering breaches, joining Herbert Smith Freehills Kramer, Goodwin Procter and WilmerHale. One compromised user account was enough. 8 Sept 2026 4 min ](/news/law-firms-quinn-emanuel-mcdermott-data-breaches-2026)[ ![Mathspace breach exposes more than one million students, staff and parents](/images/news/mathspace-data-breach-one-million-students-2026.jpg) Breach Analysis ### Mathspace breach exposes more than one million students, staff and parents An unpatched self-hosted reporting system gave attackers seventeen days inside Mathspace, exposing names and email addresses for 1,079,819 people across Australia and New Zealand. 8 Sept 2026 4 min ](/news/mathspace-data-breach-one-million-students-2026)[ ![AnMed Closes Facilities Following Ransomware Attack and Data Claims](https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/anmed-facility-closures-following-ransomware-cyberattack-1786723492583.png) Breach Analysis ### AnMed Closes Facilities Following Ransomware Attack and Data Claims South Carolina health system AnMed was forced to close 83 facilities following a cyberattack. Threat actors subsequently claimed to hold 6 terabytes of sensitive patient records. 14 Aug 2026 4 min ](/news/anmed-facility-closures-following-ransomware-cyberattack)[ ![US directive allows private firms to conduct offensive cyber operations](https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/us-directive-private-firms-offensive-cyber-operations-1786723418300.png) Breach Analysis ### US directive allows private firms to conduct offensive cyber operations US President Donald Trump has signed a memorandum permitting private firms to execute offensive cyber operations. The move raises new risks of retaliatory attacks and collateral system disruptions. 14 Aug 2026 3 min ](/news/us-directive-private-firms-offensive-cyber-operations)[ ![Adobe Commerce attacked immediately after session breach vulnerability](https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/adobe-commerce-session-vulnerability-exploited-after-disclosure-1786684691416.png) Breach Analysis ### Adobe Commerce attacked immediately after session breach vulnerability Security firm Sansec blocked attacks targeting Adobe Commerce immediately after disclosure. The flaw allows unauthenticated attackers to hijack sessions and customer data. 14 Aug 2026 4 min ](/news/adobe-commerce-session-vulnerability-exploited-after-disclosure) ## Suggested Reading - [What is Offline Secure Storage The foundation of physical disconnection ](/how-it-works/offline-secure-storage) - [Why Offline Secure Storage The case for physical control ](/why-oss) - [Ransomware Defence Hold gold copies offline ](/oss-for-ransomware-recovery) - [Control Physical path control for IT and OT ](/solutions/control) - [Knowledge Vault All articles, guides and whitepapers ](/learn/knowledge) - [Book a Demo See Firevault in action ](/demo) [Back to Knowledge Vault](/learn/knowledge)