Co-op cybersecurity failures

Co-op confirms data breach affected 6.5 million members

It’s now confirmed. All 6.5 million members had their data stolen in the huge Co-op data breach earlier this year.

What’s the latest in the Co-op data breach?

The Co-op’s CEO has spoken publicly for the first time about the incident, describing the breach as deeply personal and impactful. Not just for members, but for employees too.

While no financial data was taken, the stolen information included names, addresses, and contact details. Speaking to the BBC, Ms Khoury-Haq said that she was “incredibly sorry” for the attack and admitted that “people will be worried and all members should be concerned.”

Why this matters

Co-op is built on trust. Members are more than just customers—they’re part-owners. So when something like this happens, it hits differently. And if you’re one of the 6.5 million affected, we believe you deserve clarity, support, and compensation.

This breach is a stark reminder of how widespread and damaging cybercrime has become. With data now seen as a valuable asset, even organisations built on co-operative values aren’t immune from these kinds of threats.

6.5 million Co-op members are at risk

If you’re a Co-op member, be wary of unsolicited contact. While no bank details were exposed, scammers may still try to take advantage of the situation.

Following the Co-op data breach, scammers may pose as:

 
  • Co-op customer service representatives
  • Banks or card providers “flagging suspicious activity”
  • Legal firms offering bogus compensation claims
  • Fraud prevention services asking you to verify identity details.

 

These attempts can seem urgent, well-designed, and convincing. They may come via email, text message, social media, or even phone calls. The goal is simple: to get you to click a link, hand over personal information, or install malicious software.

Join the Co-op data breach compensation claim

A group lawsuit is seeking compensation for those whose personal data was compromised in the Co-op data breach. Lawyers behind the claim argue that the Co-op failed in its legal duty to protect customer data under UK GDPR and the Data Protection Act.

The claim is being brought forward on a no-win, no-fee basis. It’s a low-risk way to seek justice if you’ve been impacted by the Co-op data breach.

You can find out what no-win, no-fee means in our handy guide.

Join the Claim connects consumers with SRA-regulated lawyers. Visit the claim page to check your eligibility if a claim is open with one of our trusted legal partners. If a group action has not yet been launched, you can register your interest and we’ll keep you informed if a partner firm decides to take a claim forward.  

This information is for general guidance only and does not constitute legal or financial advice.

Found this helpful? Share it

Facebook
Twitter
WhatsApp
LinkedIn
Email

Or

You may also like:

BMW faces legal action over emissions-cheating software. Learn what the scandal involves, who is affected, and what it means for UK diesel car owners.
Capita’s data breach exposed pension holders’ personal data. Stay updated on the latest legal action, investigations, and regulatory responses.
Confused about Jaguar Land Rover DPF claims vs. Dieselgate? Learn the key differences, legal actions, and how to check if you qualify for compensation.

Latest news & insights

Discover 10 essential facts about group litigation for first-time claimants. Learn how joining a group...
Delayed 3+ hours or had a cancelled flight? You could claim up to £520 under...
Massive UK collective actions could return billions to consumers, yet awareness remains low. Discover the...

Did you know we have a newsletter?

Sign up for our newsletter to stay up to date.