'Get the people fed' say islanders hit by Co-op cyber attack

Paul Ward and Lorna Gordon
BBC News
BBC The front entrance of a Co-op grocery shop in Bowmore on Islay. A man wearing a blue puffer jacket and light chinos, with his back to the camera, walks in through the doorway.BBC

Islay isn't the obvious location for the frontline of cyber crime but the picturesque island famous for its wildlife and whisky distilleries is dealing with the real world impacts of the major supermarket hack.

The targeting of retailers including Marks and Spencer and Co-op has led to sporadic empty shelves across UK stores as the companies slowed deliveries and shut down parts of their IT systems in response to cyber attacks.

In most places, disappointed customers at least have the option of visiting other supermarkets to pick up supplies. But communities across Scotland's Western Isles generally don't have that luxury.

In this part of the country, Co-op is often the only large store, with some smaller independent retailers operating.

No fresh food

Brian Palmer stands in front of an office for the newspaper The Ileach - a sign for which can be seen in the window behind him. Brian wears a Nordic knitted jumper in dark blues and grey - he has white hair, which is blowing in the wind, and round glasses.
Brian Palmer, editor of a local newspapers, is an authority on island issues

"The Co-op is so important here," said Brian Palmer, editor of local newspaper, The Ileach.

"We don't think because we live here that we should have every convenience you get on the mainland but I think a lack of food is probably stretching it a wee bit."

No one is starving as a result of shortages but there is clear frustration with the lack of fresh food available.

Staff at the Bowmore Co-op said the last full delivery was at the start of May. There have since been smaller deliveries, but not of what is required.

The first aisle of the shop usually stocked with chilled meat, fruit and vegetables was almost completely bare on Friday afternoon. As was the bread section shortly after a morning delivery.

"It's easy to shop when there's nothing to pick from," one customer joked as they left the store.

A Co-op worker said they had dealt with red weather warnings and covid but "no one understands a cyber attack."

A row of empty shelves in a grocery shop
Not a morsel of food on this stretch of shelves in Bowmore's Co-op on Islay

The company told the BBC last week that the attack on its systems meant store deliveries had been hit and the hack had resulted in "significant" amounts of customer data being stolen.

Co-op said "remote lifeline stores" will receive extra deliveries soon.

A "spokesperson said: "We take our responsibility to our Scottish island stores and communities very seriously.

"As a result of the Cyber-attack, and the steps we took to keep our systems safe, we currently have a temporary contingency stock ordering and delivery process, where we have prioritised the quantity of stock and deliveries to these lifeline stores.

"From Monday, 12 of the most remote lifeline stores will receive treble the volume of available product, and another 20 lifeline stores will get double the volume.

"We would like to thank all members, customers and our amazing store colleagues for their support and goodwill through this time.

'Get the people fed'

Donald Gillies stands with his back to a sandy coast. He is bald and wearing a navy blue t-shirt
Donald Gillies does not believe enough is being done to solve the problem

Construction business manager Donald Gillies said he's been unable to provide a good lunch for his site workers in port Ellen throughout the last week.

Asked if enough was being done to deliver food he said: "That's tosh (rubbish)."

"It's poor, it's really poor. Something has gone wrong in the IT system and like everything else in society it's all computer-driven and no one can make a bloomin' decision to send food over.

"Get the people fed."

When will disruption end?

Jude McCorry, chief executive of the Cyber and Fraud Centre based in Edinburgh, said it can take along time for companies to fully recover from cyber attacks.

"Even companies we don't think of as tech firms rely heavily on complex systems that take time to recover," she said,

"We know from past experience that some cyber attacks are debilitating for months.

"I'm not saying there'll be this level of disruption for weeks and months, but it can take a long time for organisations to get back to the way they were before an attack."

On Islay, people are full of praise for the local Co-op workers, they know it's not a local issue.

Sheena MacKellar stands with her back to a stone wall - beyond which is a stretch of grass and an island coastline. Sheena has short blonde hair and is wearing a black and yellow sunflower pattern blouse and a black cardigan
Islanders are made of 'strong stuff', says Sheena MacKellar

Sheena MacKellar from Islay Gaelic Centre took aim at the group behind the hack.

"These people are selfish. They are affecting the wrong people.

"We're hard working honest people and we're the ones who are suffering and having to work round it.

"But we're islanders, we're made of stronger stuff."