Coles Group is investigating a cybersecurity incident as it checks for any impact on customer, team and supplier information and keeps its stores and online channels operating.
The retailer says customers can shop in stores, through its app and on its website. A small number of customers have experienced Liquorland click-and-collect issues, which Coles is also investigating. The company has not said whether those problems are related to the cyber incident. It says it has no indication that Flybuys accounts were affected.
Coles is working with the Australian Cyber Security Centre (ACSC), other agencies and regulators, and cybersecurity specialists to secure its technology environment.
The company’s FY2026 annual report identifies reliance on suppliers and other third parties as an operational risk. It says cyber events affecting those partners could disrupt operations and harm customer satisfaction, reputation and financial performance. The report describes a past cyber incident at a poultry supplier that temporarily affected production, but does not connect that event to the current investigation.
Coles has not said when the incident began or which systems are involved. Its inquiry has not identified evidence of customer, team or supplier data being compromised or removed; the company has not said whether any data was accessed. It plans to post further updates on its incident page.
