The Co-op reported a loss of around £206 million in revenue from the intrusion filed at 26-0411, alongside Marks & Spencer’s roughly £300 million. Both formed part of what UK analysts assessed as a single combined event.
Revenue Loss And Incident Cost Are Not The Same Number
Revenue that did not arrive is sales the business could not transact — empty shelves, systems that could not take orders, distribution that could not route. It is measurable against forecast and it is the figure that reaches the market.
The cost of the incident is a different set: forensic investigation, remediation, legal work, notification, regulatory engagement, higher insurance renewal. Some is capitalised, some is spread across periods, and none of it appears in the headline.
Reporting routinely presents one and calls it the other. For a grocer, revenue loss dominates; for a data-theft victim with no operational disruption, it is close to zero while the incident cost is substantial.
A Food Retailer Has An Unusual Loss Profile
Groceries are perishable and demand is not deferred. A customer who could not buy milk during the disruption bought it elsewhere and did not buy twice the following week.
That is a genuine, permanent loss, unlike a car manufacturer’s — the JLR file at 26-0119 describes production that was delayed rather than destroyed, because a customer waiting for a vehicle mostly still wants the vehicle.
Graded medium: the revenue figure is the organisation’s own disclosure, and the split between revenue impact and incident cost has not been published.
Compiled from public reporting, listed below. Figures are as disclosed and as assessed by third parties; the distinction drawn between revenue loss and incident cost is our analysis. See 26-0411 for the intrusion. Corrections: corrections@forensicpost.com.