Coop Värmland runs 44 supermarkets and 17 smaller grocery stores. Credit: AleWi/commons.wikipedia.org.

Swedish supermarket chain Coop has confirmed that its stores in the county of Värmland have been exposed to a cyberattack.  

The ransomware group Cactus claimed responsibility for the attack, according to a statement provided to Recorded Future News. 

Go deeper with GlobalData

Data Insights

The gold standard of business intelligence.

Find out more

Related Company Profiles

View all

The cyberattack started on 22 December 2023 and left all Coop Värmland outlets unable to process card payments.  

The stores remained open and the retailer reassured customers through a temporary page on its website. 

The page also provides alternative contact methods for specific orders or questions regarding its rewards programme. 

Meanwhile, Coop urged customers to reach out to their nearest store via Facebook for inquiries.  

How well do you really know your competitors?

Access the most comprehensive Company Profiles on the market, powered by GlobalData. Save hours of research. Gain competitive edge.

Company Profile – free sample

Thank you!

Your download email will arrive shortly

Not ready to buy yet? Download a free sample

We are confident about the unique quality of our Company Profiles. However, we want you to make the most beneficial decision for your business, so we offer a free sample that you can download by submitting the below form

By GlobalData
Visit our Privacy Policy for more information about our services, how we may use, process and share your personal data, including information of your rights in respect of your personal data and how you can unsubscribe from future marketing communications. Our services are intended for corporate subscribers and you warrant that the email address submitted is your corporate email address.

A Coop spokesperson was quoted by Recorded Future News as saying: “We can confirm that Coop Värmland has experienced a cyberattack. Upon detection, external expertise was engaged, and they promptly initiated intensive efforts, primarily focused on closing the vulnerabilities where intrusions occurred. 

“The current assessment indicates that these vulnerabilities have been successfully addressed. The work has been ongoing since the occurrence and has persisted throughout the Christmas holiday.” 

The Värmland branch runs 44 supermarkets, 15 Pekås and two MaxiMat stores. 

The cyberattack is not the first for Coop, which was impacted by a ransomware attack on Kaseya in 2021, resulting in the closure of 800 Coop stores nationwide. 

The Cactus ransomware gang has not disclosed the extent of the data compromised or the ransom amount demanded.