The world’s largest online gambling operator, Flutter Entertainment has confirmed a major data breach affecting up to 800,000 customers, primarily in Ireland and the United Kingdom. The breach stemmed from a third-party vulnerability and led to the exposure of sensitive customer data, including usernames, email addresses, IP addresses, device IDs, and records of recent account activity.
The company, which owns leading gambling platforms such as Betfair and Paddy Power, disclosed the incident after detecting unauthorized access to a portion of its betting account information. While Flutter emphasized that no passwords, government-issued ID documents, or usable payment details were compromised, the exposed data still poses a significant risk. Security experts warn that this kind of information could be leveraged in phishing schemes, identity theft, or other cyberattacks.
In customer notifications, Flutter stated that the unauthorized access has been removed and the breach has been contained. The company is working with cybersecurity experts to conduct a full investigation and bolster its security measures to prevent similar incidents in the future. Customers were advised to remain alert and monitor their accounts for suspicious activity.
“The nature of this incident means that regrettably, some of your personal information has been impacted,” Flutter said in a message to affected users. In certain cases, customer address information was also compromised, although the company maintains that the scope of the breach was limited to specific betting account data.
With a 2024 market capitalization of US$50.6 billion and annual revenues exceeding US$14 billion, Flutter Entertainment holds a dominant position in the global online gambling industry. However, the breach underscores the growing cybersecurity challenges facing major digital platforms—particularly those handling vast amounts of personal and financial data.
