Lord Sandison said the claimants can bring group proceedings at the Court of Session after the 2022 data breach.

Martin Dandridge, 72, had his arm broken in the attack, leaving him with “ongoing pain” in his forearm.