It’s now confirmed. All 6.5 million members had their data stolen in the huge Co-op data breach earlier this year.
What’s the latest in the Co-op data breach?
The Co-op’s CEO has spoken publicly for the first time about the incident, describing the breach as deeply personal and impactful. Not just for members, but for employees too.
While no financial data was taken, the stolen information included names, addresses, and contact details. Speaking to the BBC, Ms Khoury-Haq said that she was “incredibly sorry” for the attack and admitted that “people will be worried and all members should be concerned.”
Why this matters
Co-op is built on trust. Members are more than just customers—they’re part-owners. So when something like this happens, it hits differently. And if you’re one of the 6.5 million affected, we believe you deserve clarity, support, and compensation.
This breach is a stark reminder of how widespread and damaging cybercrime has become. With data now seen as a valuable asset, even organisations built on co-operative values aren’t immune from these kinds of threats.
6.5 million Co-op members are at risk
If you’re a Co-op member, be wary of unsolicited contact. While no bank details were exposed, scammers may still try to take advantage of the situation.
Following the Co-op data breach, scammers may pose as:
- Co-op customer service representatives
- Banks or card providers “flagging suspicious activity”
- Legal firms offering bogus compensation claims
- Fraud prevention services asking you to verify identity details.
These attempts can seem urgent, well-designed, and convincing. They may come via email, text message, social media, or even phone calls. The goal is simple: to get you to click a link, hand over personal information, or install malicious software.
Join the Co-op data breach compensation claim
A group lawsuit is seeking compensation for those whose personal data was compromised in the Co-op data breach. Lawyers behind the claim argue that the Co-op failed in its legal duty to protect customer data under UK GDPR and the Data Protection Act.
The claim is being brought forward on a no-win, no-fee basis. It’s a low-risk way to seek justice if you’ve been impacted by the Co-op data breach.
You can find out what no-win, no-fee means in our handy guide.
Join the Claim connects consumers with SRA-regulated lawyers. Visit the claim page to check your eligibility if a claim is open with one of our trusted legal partners. If a group action has not yet been launched, you can register your interest and we’ll keep you informed if a partner firm decides to take a claim forward.