Costa Coffee Club has written to members this morning warning that they have identified a small number of Coffee Club card members, (around 0.02%), with ‘some unusual activity on their accounts’.
Consequently, Costa has conducted a full security review and in the interim, has removed the facility for members to access their Coffee Club accounts online.
Affected customers have already been informed and Costa is taking the additional precaution to reset the account passwords of every Coffee Club member. Costa is also introducing a new format for passwords to further optimise security and protect members’ Coffee Club points. Account passwords will be reset in the next few days.
How does this impact you if you’re a member?
Plastic Card Holders
You can simply continue to collect and redeem points as usual. Once you receive an email confirming your password has been reset you can follow these quick steps to access your account:
1. Go to the Coffee Club website – www.costa.co.uk/coffee-club
2. Click on ‘Forgotten your details?’ and enter your email address
3. This will trigger a new temporary password
4. Use this to log back into the page
5. If you wish you can change this to something more memorable under the account menu
Coffee Club app users
Please make sure you have the latest version of the app for these updates to take place. When Costa resets your password this will automatically close your app session. Once this happens simply follow the steps below so you can continue to collect and redeem points as usual:
1. Close your existing app session
2. Reopen the app and click ‘forgotten password’ to reset it
3. Use the new password that is emailed to you to log back into the app
4. Change this to something more memorable Account > Settings > change password
Costa has apologised for any inconvenience this causes but insist that ‘it’s very important to us that your points and registration details remain safe’.
If you’re affected by the hacking, please let us know: ed****@************ng.com
Thanks!



