Paddy Power and Betfair data breach: Flutter warns of phishing risk

What happened

Flutter Entertainment, the largest player in the gambling market, has officially admitted the leak of customer data of its Paddy Power and Betfair brands. The incident affected personal information, including:

• usernames,
• email address,
• parts of home addresses,
• IP addresses and device IDs,
• as well as account activity data.

Passwords, payment details and documents were not compromised, but the company emphasises that the threat of phishing and fraud remains high. Users were advised to be especially attentive to suspicious emails and messages.

Flutter Reaction

After the incident was discovered, Flutter launched an internal investigation and immediately notified the regulatory authorities. External cybersecurity specialists were also involved in the check. The company admits that the leak did not affect all customers, but the total number of victims is "significant".

Flutter notes that the use of stolen data in criminal schemes has not yet been recorded, but the risks remain. There may be attempts to deceive through email and social networks under the guise of official messages from the company's brands.

What users should do

If you have an account with Paddy Power or Betfair, we advise you to:

• Do not click on suspicious links in emails or SMS.
• Check your account's security settings.
• Activate two-factor authentication if it has not already been done.
• Be especially careful if you log in to your account from a new device — it's better to change your password right away.
• Play in Normal Casinos

Inference

Although the bulk of sensitive data (such as payments or documents) was not affected, the very fact of a large-scale leak is a red flag. Especially considering that Flutter operates dozens of brands around the world, and the trust of players is key to its reputation.