Comment by sillystu04

That sounds dangerously close to victim blaming.

Obviously if Co-op were negligent in their handling of member data they're also guilty of something. But even the best organisations have some level of exposure to phishing related attacks.