Hi mingle -calm yourself
The solicitor has said they arent gonna bring any criminal charges. so you can breathe over that. When at uni read up about the johari window model
http://www.businessballs.com/johariwindowmodel.htm
it (JH window) boils down here to: 'you dont know all that the employer has done ....' Like the employer may have already complained to the Police who have shown no interest at all in it ....
From the civil law point of view - cases are brought on loss. There doesnt seem to be any loss in this case ( loss of custom ) that is if the 45 contacts have said to your employer " Mr Employer, we will neva leave you " then there is no loss, no consequential loss and nothing for them to claim.
I suppose they could claim for the solicitors time - I have never heard that occurring. You should also stress you are penniless. Lawyers dont go after people who have no moolah. You could resist that on the grounds there is no loss and thus no consequential loss. You are what they call a man of straw
what about a claim for £500k for the employer's wife's headacne ? is not a head of claim that is allowable ( nor a charge for dog sitting the dog )
so basically wait .....
now what you can do usefully is
a) think about reading Law at uni
b) read about the Johari window
c) write a reflective essay for your own needs about why it was stupid ( data theft is wrong ) and why you are not gonna behave like a dockhead again - ever. This should involve an analysis on how you got found out ( no dont tell us ) . I imagine that one of the 45 contacts was approached by the small insurance broker who when questioned by your employer said happily " oh m123 gave me the names - I took them in good faith "
so you can learn from this - big time
as for the consequences - wait and see
they may well be less than you fear
( and better than you hope )