Breach Database / Paddy Power
Yes — Paddy Power was breached.
- 590,954 accounts affected
- Breach occurred 2010-10-25 · paddypower.com
- Verified entry in the Have I Been Pwned catalog
What happened
In October 2010, the Irish bookmaker Paddy Power suffered a data breach that exposed 750,000 customer records with nearly 600,000 unique email addresses. The breach was not disclosed until July 2014 and contained extensive personal information including names, addresses, phone numbers and plain text security questions and answers.
What data was exposed
- Account balances
- Dates of birth
- Email addresses
- IP addresses
- Names
- Phone numbers
- Physical addresses
- Security questions and answers
- Usernames
- Website activity
What to do right now
- Be alert for smishing and SIM-swap attempts. Treat unexpected texts and "carrier" calls with suspicion; add a PIN/port-freeze with your mobile carrier.
- Watch for targeted phishing mail. A leaked home address makes postal and doorstep scams more convincing.
- Reset security questions everywhere you used the same answers. Treat leaked security answers like leaked passwords — they rarely change and unlock account recovery.
- Expect convincing phishing emails. Attackers use breached details to write personalized emails. Be suspicious of any message referencing this service.
- Check your other accounts on Have I Been Pwned. Your email address may appear in other breaches you don't know about yet.
- Monitor the apps you use going forward. Clearly watches the breach record for the companies behind your apps and alerts you the moment one appears.
Breach data from Have I Been Pwned. Listing here means the service appears in the public breach record — not that your personal data was affected.