- Computer pirates did not need passwords of Paddy Power and Betfair users to start building specific scams using personal betting activity
- Even without card details, stolen emails and IP can promote highly convincing fraud attempts
- Players are now main objectives for phishing messages adapted to their habits
An important data violation that affects up to 800,000 users of two popular online betting platforms has generated concerns about Phishing’s risks and the role of artificial intelligence in the exploitation of exposed personal data.
The incident, confirmed by Flutter Entertainment, the parent company of Paddy Power and Betfair, compromised User IP addresses, email addresses and online activity linked to individual game accounts.
Although passwords or payment details were not exposed, cybersecurity experts warn that stolen data could still be used to mount highly specific attacks.
Passwords are safe, but must remain vigilant
Flutter, which operates several important play brands, including Sky Bet and Tombola, recognized the violation and described it as a “data incident” that has since been contained.
The company has told users that there is “nothing to do in response to this incident”, although they were advised to remain attentive.
With 4.2 million average monthly players on their United Kingdom and Irish platforms, the exhibition of even a fraction of its user base could be serious.
Harley Morlet, marketing director of Storm Guidance, warned that those who regularly spend large amounts of money on these sites could be at greater risk.
“With the advent of AI, I think it would really be very easy to build an automated large -scale attack,” he told the BBC’s Today program.
“Basically, focus on making messages that seem attractive to those players.”
Tim Rawlins, director and main advisor of the NCC Group, echoed those concerns, urging customers to be careful with emails that reflect their personal betting patterns.
“You can re -enter your credit card number, you can re -enter the details of your bank account, that is the kind of things that people must be attentive and be aware of that type of threat.”
“If it is too good to be true, it is probably a scammer that comes after your money,” he added.
Rawlins also declared that AI is making phishing attempts more difficult to detect, pointing out an increase in fraudulent electronic emails.
The risk is especially acute in the PHishing campaigns of Lanza, where stolen data is used to adapt the messages that closely mimic the legitimate correspondence.
For users who now wonder how to protect, trust only a free antivirus or even a standard Android antivirus application may not be enough.
While an antivirus solution can block known malware, it is less effective against emails skillfully written that convince victims to deliver confidential information.
On the other hand, a layer approach that includes caution, skepticism and good cyber hygiene remains the best defense.
