Flutter Entertainment, the parent company of UK betting brands Paddy Power and Betfair, is conducting a thorough investigation following a significant data breach that compromised the personal information of a large portion of its UK customer base.
The incident, confirmed on July 8th, 2025, involved unauthorised access to internal databases, exposing customer data such as usernames, email addresses and the first lines of home addresses.
Technical details, including device identifiers, IP addresses and records of recent account activity, were also accessed during the breach.
Flutter has assured customers that the most sensitive information, such as passwords, identification documents and payment card details, remained secure and was not compromised in the attack.
The company acted swiftly upon discovery, notifying affected users by email and informing both the Gambling Commission and the Information Commissioner’s Office.
The breach has now been contained, and there is no evidence to suggest that the exposed data has been misused to date.
Massive Data Breach in a Significant Number of Players Impacted
A significant number of UK customers were affected, with estimates suggesting up to 800,000 individuals may have had some personal details exposed.
Flutter’s 2024 annual report notes that the operator serves around 4.2m monthly players across the UK and Ireland, highlighting the scale of the incident within the betting sector.
Despite not being legally required to notify customers due to the limited nature of the data accessed, Flutter opted for transparency, reaching out to all impacted users and regulators.
The company has engaged external IT security experts to assist in the investigation and bolster its cybersecurity defenses.
Flutter emphasized that the unauthorized access has been removed and that the incident is fully contained.
Customers have been urged to remain vigilant for potential phishing attempts or impersonation scams, as the compromised data could be used for fraudulent activities.
This event underscores the ongoing cybersecurity challenges facing the online gambling industry, with recent attacks targeting other major organizations as well.
Flutter’s response, including immediate containment and full disclosure, reflects the growing importance of robust data protection measures in safeguarding customer trust and regulatory compliance in the digital betting landscape.
The post Flutter Entertainment investigates player data breach affecting UK customers appeared first on Esports Insider.