Oddschecker Confirms IT Security Incident Exposing User Passwords and Personal Data
TL;DR — Oddschecker confirmed a contained data breach exposing passwords, contact details, and dates of birth with no detected misuse. The operator reported the incident to authorities and advised password resets. Similar attacks have hit Paddy Power Betfair, BetMGM, Boyd Gaming, and Betika.
SCCG Take — Containment claims do not erase exposure risks for platforms holding reusable credentials. Operators must segment user data to limit breach impact amid repeated sector incidents.
Oddschecker has confirmed an IT security incident that exposed a limited set of user data. The platform’s owner, FairPlay Sports Media, described the breach as contained and resolved in statements to affected account holders and according to reporting by SBC News.
The compromised information included passwords, contact details, and dates of birth. FairPlay Sports Media stated it has not identified any evidence that the data was misused or deployed in phishing messages to customers’ personal email addresses.
A spokesperson for FairPlay Sports Media told SBC News: “We recently identified, contained and resolved an IT security incident involving a limited part of our systems. This did not disrupt our usual services and we continue to operate as normal. We are liaising closely with our users, partners and the relevant authorities.”
The company engaged external IT specialists, reported the incident to authorities likely including the UK Information Commissioner’s Office, and urged account holders to reset their Oddschecker passwords and any identical credentials used elsewhere.
Persistent Cyber Incidents Across the Sector
Such events are recurrent in betting and gaming. The source details a large attack on Flutter Entertainment’s Paddy Power and Betfair in July last year, a 2022 breach at BetMGM that obtained several patron records, a Boyd Gaming cybersecurity incident disclosed in an SEC filing that prompted an ex-employee lawsuit in October last year, and a systematic compromise of subscriber data at Kenya’s Betika uncovered in June.
Analysis by ScamInfo.ai of over 7,185 websites earlier this year found that 34.7% of identified critical risk sites were betting and gambling platforms. Oddschecker noted that these types of incidents are increasingly common and affect organisations in all sectors.
Reporting: SBC News
Generated by SCCG’s automated editorial system from published source reporting. SCCG Management holds editorial responsibility.
Containment does not mean no exposure — segmented data architecture is now table stakes, not optional infrastructure.
We're tracking a pattern: Oddschecker, Paddy Power, BetMGM, Boyd, Betika — all breached. When 35% of high-risk sites are betting platforms, this isn't bad luck, it's systemic underinvestment in data hygiene and architecture. Operators holding reusable credentials without segmentation are sitting on liability.
- Oddschecker breach exposed passwords, contact details, dates of birth; no misuse detected yet
- Part of sector-wide pattern: Flutter, BetMGM, Boyd Gaming, Betika all hit in past 18 months
- 34.7% of critical-risk websites identified in 2026 analysis were betting/gaming platforms
SCCG angle: We connect operators to enterprise-grade cybersecurity and data architecture partners who've hardened platforms in every regulated jurisdiction we serve. If you're still using monolithic databases or shared credential systems, we'll introduce you to the vendors who can segment before the breach, not after the headline.
Gaming, betting and prediction markets — the desk’s read, every weekday.
Subscribe →