Class action lawsuits are harming both businesses and consumers, campaigners have said, as M&S faces the first such claim over the theft of customer data by hackers.