Has your personal data been compromised in the Co-op cyberattack?
KP Law can help victims to claim compensation.
It has been reported in the press that this breach potentially exposed the personal information of up to 8 million individuals who had registered for the Co-op membership scheme, including names, addresses, emails, phone numbers, and membership card numbers. While financial details were reportedly not compromised, the exposed data can still be used for identity theft and fraud.
“Data breach claims play an important role in holding organisations accountable when personal information is not adequately protected. Our team combines data protection expertise with experience of complex group actions to investigate breaches and pursue appropriate remedies.”
Kingsley Hayes | Partner & Head of Data & Privacy Litigation
Cybercriminal group DragonForce begins targeting UK retailers, including M&S and Harrods.
Co-op Cyberattack Occurs – DragonForce claims responsibility for breaching Co-op’s systems, allegedly accessing data from up to 8 million members.
DragonForce contacts BBC News, stating they’ve stolen significant amounts of customer and employee data.
After initially denying a breach of personal data, Co-op admits sensitive customer information may have been compromised.
Law firms, including KP Law, begin preparing a group claim to pursue compensation for affected individuals.
At KP Law, we represent clients in group actions with the innovation, resources and expertise needed to take on complex cases. Our GDPR, data breach and cybercrime specialists have more than 50 years of combined experience, making us one of the most experienced multi-claimant law firms in the UK. Working alongside leading barristers and legal experts, we provide the highest standard of support while leveraging the resources and global expertise required to pursue challenging claims successfully. With offices in London, Liverpool, Manchester and Birmingham, supported by technology that enables us to serve clients across England and Wales, we combine national reach with a modern, client-focused approach. By using innovative technology, operating on a no-win, no-fee basis, and keeping the process straightforward and hassle-free, we make accessing expert legal representation as simple as possible.
In early 2025, the Co-op admitted that the data they held for up to 8 million members had been stolen by cyber criminal group DragonForce.
The criminal group accessed names, addresses and contact information including emails and phone numbers. The Co-op have stated that no financial or transactional information was accessed in the breach.
The Co-op released an FAQ for affected customers on their website here.
Co-op should be in touch to notify affected individuals.
Anyone who thinks they might be involved should take immediate steps to protect themselves.Find out how to do this here.
If you receive notification that you are affected by the Co-op data breach, register to receive updates on our investigation. We’ll let you know what’s happening, and if and when you can make a data breach compensation claim.
A group action claim is where a group of people – sometimes even thousands of people – have been affected by the same issue. Group action cases are also known as class actions, multi-claimant, or multi-party actions.
If we do launch a group action, there are no costs to join a claim. However, if your claim is successful, you may have to pay a ‘success fee’. This fee is taken from the compensation awarded to you. At KP Law, our success fee is competitive, and we make sure you are fully informed about any potential costs before you officially join our action. If you lose, you won’t have to pay a penny.
“Used KP Law for a group data breach compensation claim. I was kept updated throughout the process. The whole thing was easy with no stress.” – Anon
“I used the firm as part of a group action following a, potentially, hazardous data breach. From the very start, I was kept updated regarding the other side’s actions and what the counter actions were. I found KP to be trustworthy, knowledgeable and very customer friendly.” – Pat
“I used KP Law for the first time for a data breach group compensation claim. From outset to conclusion I was kept fully informed and received clear, regular updates throughout. I would not hesitate to recommend them and would choose them in any future action.” – Owen
By not putting adequate processes and training in place, organisations are leaving customers open to an increased risk of cyber scams and avoidable mistakes that lead to data breaches. If you are a victim of a data protection failure, check out our current group actions below to see if we are running a claim related to that specific breach.
Unsure if your personal data has been exposed in a breach? Learn how to check and what steps to take, including your right to join a group claim in the UK.
At KP Law, our expert data breach lawyers want to lessen the impact of a data violation as much as possible. To help, we have collated a range of support, information and other resources to help you get your life back on track.
The Court of Appeal has handed down its judgment in Farley v Paymaster, a landmark decision which strengthens the rights of data breach victims
In today’s digital world, personal data has become one of the most valuable commodities—especially for cybercriminals. From financial details to personal information and even login
In today’s digital landscape, safeguarding personal information is more critical than ever. A data breach occurs when unauthorised individuals gain access to confidential data, leading
