Flutter Entertainment has confirmed that Betfair, one of the UK’s most popular betting platforms, has been affected by a serious data breach. The incident, revealed on 8 July 2025, compromised the personal details of a significant number of customers.
If you’ve used Betfair recently, here’s what you need to know, and what steps to take next.
What was exposed in the Betfair data breach?
According to Flutter, the data breach involved access to:
- Usernames
- Email addresses
- First line of home addresses and the city
- Technical data such as IP addresses and device IDs
- Records of recent betting account activity
Thankfully, more sensitive details, such as passwords, payment card data, and ID documents, are not thought to be accessed. Still, the breach presents a real risk of phishing attacks and scams using this personal data.
How the Betfair breach unfolded
Customers first began sharing emails from Betfair about the breach on social media, prompting widespread concern. Flutter then released a statement confirming that both Betfair and Paddy Power had been affected.
An investigation was launched immediately, with the support of independent cybersecurity experts. According to Flutter, the incident has now been fully contained and all necessary regulators, including the Information Commissioner’s Office (ICO) and the Gambling Commission, have been notified.
What Flutter has said about the Betfair data protection breach
A spokesperson for the company commented:
“Our investigation concluded that the affected information was isolated to limited betting account information. No passwords, ID documents or usable card or payment details were impacted. We are informing all affected customers.”
While the company maintains that no misuse has been detected so far, it’s advising all affected users to remain vigilant.
What should you do?
If you have a Betfair account, here are some simple but important steps to protect yourself:
- Update your account password, especially if you use the same one elsewhere.
- Watch out for phishing emails or texts pretending to be from Betfair or other services.
- Enable two-factor authentication on your Betfair account, if you haven’t already.
- Check for any suspicious account activity and report anything unusual.
- Avoid clicking on unsolicited links or providing information unless you’re sure who you’re dealing with.
You can get more tips on what to do after a data breach in our handy guide.
Can you claim compensation?
If your data was compromised in the Betfair data breach, you could be entitled to claim compensation for the inconvenience, risk, and stress caused.
Join the Claim connects consumers with SRA-regulated lawyers. Visit the claim page to check your eligibility if a claim is open with one of our trusted legal partners. If a group action has not yet been launched, you can register your interest and we’ll keep you informed if a partner firm decides to take a claim forward.
