Co-op has confirmed that all 6.5 million members were affected by the 2025 cyber-attack.
If you were a Co-op member before April 2025, you could be eligible for compensation.
*Our partner law firms work on a no-win, no-fee basis. You’ll only pay if your claim succeeds. Fees may apply if you cancel after the cooling-off period or breach your agreement. All terms are clearly explained before joining. Join the Claim isn’t a law firm, we help connect you with a regulated UK firm running this group action.
No-win, no-fee*
Expert help
Save time
Get compensation
Overview
In spring 2025, cybercriminals told BBC News that they had stolen vast amounts of customer and employee data from the Co-op. While the supermarket initially said there was “no evidence” personal details had been compromised, it later confirmed the data breach.
In July, the Co-op CEO admitted that all 6.5 million of its members had their data stolen in the cyber-attack. These Co-op members could now be at risk.
The cybercriminal group behind the attack is also said to be responsible for the high-profile M&S attack and the attempted hack of Harrods.
Cyberattacks are far more likely to succeed when a company lacks strong data security measures. As such, lawyers are now pursuing legal action on behalf of those affected by the Co-op data breach.
If you’ve been notified your data was compromised, you may be entitled to join the claim.
Our simple eligibility checker provides instant clarity. Answer a few straightforward questions, and you’ll know if you could qualify to join a Co-op data breach group action claim.
Co-op data breach – At a glance
Answer a few quick questions to see if you could qualify to join the claim. It only takes a few minutes and helps confirm if you may be eligible.
We’ll show you which regulated UK law firm will handle your claim before any details are shared, so you can review their information and decide if you’d like to continue.
If you choose to proceed, you’ll complete your registration with the law firm. They’ll handle your claim on a no win, no fee basis and keep you updated every step of the way.*
July 2025
The Co-op CEO admitted that all 6.5 million of its members had their data stolen in the cyber-attack.
June 2025
In partnership with a regulated UK law firm, we opened registration to the Co-op data breach compensation claim.
15 May 2025
A leading data breach law firm launches a Co-op data breach case.
2 May 2025
While Co-op initially said there was “no evidence” customer data had been compromised, it now admits that hackers accessed data relating to a significant number of current and past members.
1 May 2025
Harrods confirms it has restricted internet access across its sites after detecting attempts to gain unauthorised access to its systems. It is thought the same hackers are behind these attacks.
30 April 2025
The Co-op shuts down parts of its IT systems following an attempted cyberattack, affecting back-office and call centre operations.
21 April 2025
Marks & Spencer (M&S) experiences a cyberattack over the Easter weekend, disrupting contactless payments and click-and-collect services
We’ll provide more updates on this case as they occur.
Check your eligibility to find out if you could be owed compensation by joining the legal action.
In late April 2025, the Co-op experienced a cyberattack that forced the organisation to shut down parts of its IT systems. On May 2, the Co-op confirmed that attackers had accessed member data.
The data accessed by the attackers includes:
There is currently no indication that financial data (e.g. credit card or bank details) or passwords were compromised. We’ll let you know if that changes.
In July, the Co-op CEO admitted that all 6.5 million of its members had their data stolen in the cyber-attack. These Co-op members could now be at risk.
The Co-op has taken precautionary measures, including system audits and monitoring for suspicious activity. However, members are encouraged to remain vigilant for phishing attempts or suspicious emails.
Yes, if your data was part of the breach, you will be contacted directly with more details. If you receive notification of your involvement in the data breach, you could be due compensation.
We cannot say how much compensation you might get if you win a Co-op data breach case. Each claim is based on its merits and your solicitor will work to get the compensation owed to you.
We won’t charge you a single penny. And we ensure any law firms we connect you with operate on a no-win-no-fee basis.
However, fees may apply if you cancel after the cooling-off period or breach your agreement.
If you win, the law firm will either take its fees from your compensation payment or recover them from the defendants.
All terms are clearly explained before joining.
A no-win, no-fee agreement means you don’t pay your solicitor’s legal fees if your claim is unsuccessful. This makes it easier and more affordable to take part in group litigation. However, T&Cs apply.
Want the full picture, including what to check before signing? Read our complete guide to no win, no fee agreements here.
In the UK, if a group of people have experienced loss, or otherwise been harmed by an organisation’s law breaking, they can come together to fight for justice. Levelling the playing field when standing up to big businesses, group actions prove that there is strength in numbers. At Join the Claim, we bring consumers and law firms together to ensure these group actions are as powerful as possible.
No, we’re not a law firm. We help individuals find and join group action claims being run by our partner UK law firms.
We connect consumers with their legal dream teams to ensure they get the compensation and support they deserve.
Join the Claim is not a law firm. We connect individuals with top law firms for group action claims, and our service is free to use. While we may receive a fee from the law firms we introduce you to, this will not affect your costs or compensation. We are not responsible for the advice or services provided by these firms. Please note, nothing on this website is legal advice, and while we check claim eligibility, we cannot guarantee a law firm will accept a case.
Join the Claim is a registered trading name of Big on Media ltd. Big on Media is registered in the United Kingdom under licence number 09878028 with its registered office located at Big on Media, 32 Eyre Street, Sheffield, England, S1 4QZ
© Join the Claim All Rights Reserved | 2025
