Illegal Gambling Promotions Hijack NHS Health App Review Site
TL;DR — My Therappy, an NHS health app site inactive since 2020, was hacked to promote offshore non-GAMSTOP casinos via Daniel Reeves content. It follows breaches at Scottish Border Council (16 of 69 pages) and Old Catton Parish Council. The NHS trust is investigating as priority, per SBC News reporting.
SCCG Take — Repeated breaches of legacy public websites expose enforcement gaps. UK regulators must treat these vulnerabilities as immediate operational risks to limit unlicensed operators’ access to self-excluded consumers.
The website of My Therappy, an NHS-linked health app review platform, has been compromised to display promotions for unlicensed offshore casinos. The site, which has seen no official updates since October 2020, is now filled with content authored by Daniel Reeves that directs British users to non-UK and non-GAMSTOP gambling operators.
Reeves’ introduction on the site states: “Put the kettle on; we’re about to unpack the best offshore gambling spots open to British punters in 2026.” The same name appears on multiple other sites promoting illegal casinos. One such profile describes Reeves as a “Lead Casino Analyst” who “has spent more than a decade pressure-testing offshore and crypto casinos that serve US players.”
My Therappy was launched in 2013 as the first health app review site for stroke patients. It was originally created by the Northern Devon Healthcare NHS Trust and has since passed to the Royal Devon University Healthcare NHS Foundation Trust. The trust issued a statement to Digital Health News, which first reported the breach. It confirmed the matter has been escalated to digital and cyber security teams for full investigation, including a review of the website domain status. The trust said it takes online safety and security seriously and is addressing the issue as a priority.
Pattern of Public Sector Website Breaches
This event follows a similar compromise two weeks earlier on the Scottish Border Council website. Illegal gambling adverts appeared on 16 of the 69 community council webpage listings because of an outdated backlog system. In June the Old Catton Parish Council site carried an advertisement for an Indonesian online slots casino without the council’s knowledge.
These repeated cases show unlicensed operators continuing to target vulnerable users who have self-excluded through GAMSTOP.
The Imminent Regulatory Demand
The Gambling Commission, the Department for Digital, Culture, Media and Sports, and the Illegal Gambling Taskforce face an immediate and substantial requirement to disrupt this black market activity before further public sector sites are exploited.
Reporting: SBC News
Generated by SCCG’s automated editorial system from published source reporting. SCCG Management holds editorial responsibility.
When public sector sites become illegal gambling billboards, regulators must close enforcement gaps before every dormant domain gets weaponized.
We see this pattern accelerating: legacy public sites with weak security become instant distribution for offshore operators targeting self-excluded UK players. SCCG works both sides — helping licensed operators compete cleanly and advising regulators on disruption tactics. This is infrastructure risk masquerading as a content problem.
- My Therappy NHS site, dormant since 2020, now promotes non-GAMSTOP casinos via Daniel Reeves content
- Third UK public breach in months: Scottish Border Council (16 pages) and Old Catton Parish Council also hit
- Royal Devon NHS Trust investigating; Gambling Commission faces pressure to disrupt black market exploitation
SCCG angle: SCCG advises regulators across 30-plus markets on enforcement strategy and helps licensed operators document competitive harm from illegal channels. When breaches like this stack up, we connect the dots between technical vulnerability, consumer harm, and policy response — then help clients position for the crackdown.
Gaming, betting and prediction markets — the desk’s read, every weekday.
Subscribe →