In July 2025, Paddy Power and Betfair experienced a cybersecurity incident – compromising the data of thousands of customers.
Register with KP Law today to find out more, including whether you could claim compensation.
In July 2025, Flutter Entertainment (the sports betting and gambling company that owns Paddy Power and Betfair) confirmed it had experienced a ‘data incident’ on the Betfair and Paddy Power platforms and the personal information of significant number of customers had been accessed by an ‘unauthorised third party’.
KP Law is building a claim against Flutter Entertainment, we understand the severity of situation and the impact on the affected customers, and we believe you deserve justice. If you had an account with either site on or before July 2025, you may qualify to join our claim.
In July 2025, Flutter Entertainment plc, the owner of Paddy Power and Betfair, confirmed that both sites were affected by a cybersecurity incident involving unauthorised access to customer data.
While Flutter stated that not all users were impacted, they did confirm that a significant number of customer records were compromised. The exposed data may include:
They stated that some users were affected, but no full list has been released. Paddy Power and Betfair contacted a number of the customers believed to have been affected to alert them of the incident and provide information regarding online safety.
Our team at KP Law has a strong track record of holding large corporations accountable for data misuse and privacy breaches. We operate on a no-win, no-fee basis, so there’s no cost to you unless your claim is successful.
KP Law is one of the leading law firms in England & Wales, specialising in what is often referred to as group action litigation. We see our role as being your champion, someone on your side to help bring businesses to account when they let you down
Click the link below to our sign up form which will take around 15 minutes to complete. We’ll keep your information secure, and we’ll keep you updated as the case progresses.
Cybersecurity experts have warned that the information exposed in this breach could be used in highly targeted scams, known as spear phishing attacks.
These scams often involve emails that appear genuine and refer to your betting history or personal details, encouraging you to click links or share sensitive information like credit card or bank details.
With the rise of AI-generated content, there’s growing concern that cyber-criminals could launch large-scale attacks using this kind of data. That’s why it’s so important to understand whether your information may have been affected.
If you believe your data may have been accessed, you should follow the below steps to protect yourself from further harm:
Change your login details for Paddy Power and Betfair, and ensure your other accounts use strong, unique passwords.
Stay alert for suspicious calls, texts or emails.
Be aware of any unexpected activity on your accounts
While each case is judged on its own merits, there are some things we would typically look for when it comes to when claiming compensation following a data breach, cybercrime or other GDPR violation:
With stolen data, cybercriminals can make purchases using your bank and credit cards, apply for credit in your name, set up fraudulent bank accounts and access your existing online accounts.
GDPR failures, cybercrime and data breaches can have a significant impact on you, both mentally and physically. They can cause or exacerbate anxiety, stress and other psychological conditions.
