
Paddy Power and Betfair data breach: Flutter warns of phishing risk
What happened
Flutter Entertainment, the largest player in the gambling market, has officially admitted the leak of customer data of its Paddy Power and Betfair brands. The incident affected personal information, including:
- usernames,
- email address,
- parts of home addresses,
- IP addresses and device IDs,
- as well as account activity data.
Passwords, payment details and documents were not compromised, but the company emphasizes that the threat of phishing and fraud remains high. Users were advised to be especially attentive to suspicious emails and messages.
Flutter Reaction
After the incident was discovered, Flutter launched an internal investigation and immediately notified the regulatory authorities. External cybersecurity specialists were also involved in the check. The company admits that the leak did not affect all customers, but the total number of victims is "significant".
Flutter notes that the use of stolen data in criminal schemes has not yet been recorded, but the risks remain. There may be attempts to deceive through email and social networks under the guise of official messages from the company's brands.
What users should do
If you have an account with Paddy Power or Betfair, we advise you to:
- Do not click on suspicious links in emails or SMS.
- Check your account's security settings.
- Activate two-factor authentication if it has not already been done.
- Be especially careful if you log in to your account from a new device — it's better to change your password right away.
- Play in Normal Casinos
Inference
Although the bulk of sensitive data (such as payments or documents) was not affected, the very fact of a large-scale leak is a red flag. Especially considering that Flutter operates dozens of brands around the world, and the trust of players is key to its reputation.
Linked materials




celese Haha, classic! First they screwed over the players, then the license turned out to be fake, and now they’re trying to undo everything. A total circus. Yeah, everything will just get bought. They’ll pay whoever they need in Curaçao and get a new license. Money rules everything, especially in this industry.



Mangarin4ik The section about how casinos fire VPNs is a gun. I've never thought about WebRTC and the time zone. Author, thank you, you may have just saved my next deposit.

Tomorrow everyone will forget
And after that, they still push bonuses and promotions, as if nothing happened.
Leakage of addresses and IPs is already serious. You can even go as far as physical fraud.
That's why I always provide a fake address on such sites.
Absolute rubbish
Absolute rubbish
At least they recognized it
Leakage of addresses and IPs is already serious. You can even go as far as physical fraud.
Tomorrow everyone will forget