Flutter Entertainment, the parent company of Paddy Power, recently confirmed that a data breach has compromised the personal information of a significant number of customers. The incident, made public on 8 July 2025, also affected Flutter’s Betfair brand.
Here’s what Paddy Power customers need to know, and what you can do next.
What happened in the Paddy Power data breach?
The breach involved unauthorised access to Paddy Power accounts and exposed the following information:
- Usernames
- Email addresses
- First line of home addresses and the city
- Technical data, including device IDs and IP addresses
- Details of recent account activity
Flutter has confirmed that no passwords, identification documents, or payment information were accessed. Still, this kind of data exposure carries a risk of phishing scams and impersonation attempts.
How was the breach discovered?
Details of the breach first emerged through customer notification emails shared on social media, before being officially confirmed by Flutter in a statement.
Once aware of the data breach, Flutter took immediate steps to contain the breach, notified regulators including the Gambling Commission and the Information Commissioner’s Office, and launched an investigation supported by external cybersecurity experts.
According to Flutter, the incident is now fully contained and no further unauthorised access is occurring.
What is Paddy Power saying?
A spokesperson for Flutter said:
“Our investigation concluded that the affected information was isolated to limited betting account information. No passwords, ID documents or usable card or payment details were impacted. We are informing all affected customers.”
While the company maintains that no misuse has been detected so far, it’s advising all affected users to remain vigilant.
What should you do?
Even though passwords weren’t stolen, if you are a Paddy Power customer it’s worth taking steps to protect yourself. As a minimum you should:
- Change your password: Especially if you use the same one across different platforms.
- Be wary of suspicious emails or texts: Phishing attacks often follow data breaches.
- Monitor your account activity: Check your Paddy Power account for any unusual logins or transactions.
- Enable two-factor authentication: If available, this adds an extra layer of security.
- Report suspicious activity: If you receive communications claiming to be from Paddy Power that seem off, report them immediately.
You can get more tips on what to do after a data breach in our handy guide.
Are you entitled to compensation?
If your personal data has been exposed through no fault of your own, you could be entitled to claim compensation.
Join the Claim connects affected consumers with regulated UK law firms specialising in data breaches. At least one leading UK law firm is now exploring a potential group action against Flutter Entertainment.
Could you qualify for a NO-WIN, NO-FEE Paddy Power data breach compensation claim? Find out instantly with our easy-to-use checker.
