Coles Investigates Cyber Attack With Security Centre
Australia's second-biggest retailer says stores and online shopping continue as normal while the incident is examined.
Updated on Nov. 15, 2026 in Cybersecurity

Live Poll
Do you trust large companies to keep your personal data safe from hackers?
Coles has been targeted by a cyber attack, which it revealed on Monday morning and disclosed to the stock exchange in a statement. The retailer says it has identified no evidence that customer, team or supplier data has been compromised or removed from its systems.
Why it matters
The incident affects one of Australia's largest retailers, and the investigation is being carried out with the Australian Cyber Security Centre and global security experts. Its outcome will indicate whether any customer or supplier information was exposed as the inquiry proceeds.
The disclosure is a company statement to the stock exchange about an incident still under investigation, with no quantified figures released. Coles reports no evidence that customer, team or supplier data has been compromised, but the investigation's findings have not yet been made public.
The players
Coles
Coles is one of Australia's largest supermarket chains and the country's second-biggest retailer, operating stores and an online shopping service across the country.
Australian Cyber Security Centre
The Australian Cyber Security Centre is the federal government agency responsible for cyber security advice, incident response and national cyber threat coordination.
The details
Coles disclosed the cyber attack in a statement to the stock exchange, saying it is working with the Australian Cyber Security Centre and global security experts. The retailer says its operations continue and customers can shop as normal both in stores and online.
Timeline
Monday, 16 November 2026: Coles revealed the cyber attack to the public and the stock exchange.
Big Picture
The Coles response is being run with the Australian Cyber Security Centre, the federal body that coordinates national responses to significant cyber incidents affecting Australian organisations.
Customers can continue shopping at Coles stores and online without interruption while the investigation is under way. Coles says it has found no evidence that customer data has been compromised, so no action is currently required from shoppers.
The takeaway
Organisations facing a cyber incident can reassure customers by keeping services running and stating clearly what has and has not been found. Readers should watch for any official update on whether personal data was affected.
Further reading
Explore more on Cybersecurity to see how Australian organisations respond to attacks like this one.
Live Poll
Do you trust large companies to keep your personal data safe from hackers?










