Gamdom · Breach

WhiteArmor claims theft of 15.4 million Gamdom accounts, demands $15 million

Oct 26, 2026 · 1 min read

Extortion group WhiteArmor claims it holds crypto casino Gamdom's full user database: 15,420,003 accounts across 146 columns, with combined account profits exceeding $1 billion, according to the listing. The group demands $15 million in Bitcoin and published a sample of 100 accounts; Gamdom has not confirmed any data theft and the claim remains unverified. Users should change their Gamdom password and enable two-factor authentication.

By HIFY Radar newsroom Updated 10/27/2026 08:15 AM Get this every day →← Back to the feed 2 sources

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

Extortion group WhiteArmor claims it holds Gamdom's full user database of 15,420,003 accounts and demands $15 million in Bitcoin. The group published a sample of 100 accounts as proof. Gamdom has not confirmed any data theft and the claim has not been independently verified.

Why it matters

If the data is real, Gamdom customers face targeted phishing, fake support or withdrawal messages, and account takeover attempts. The listing claims combined account profits exceeding $1 billion, raising the risk of financial fraud against players. With no company confirmation, the true scale remains uncertain.

What to do

Change the Gamdom password immediately and enable two-factor authentication. Use only official company channels and treat urgent withdrawal requests or requests for account details with suspicion. Do not reuse the old password on other services.

For the technical team

Affected: Gamdom (cassino online e casa de apostas com cripto); banco de dados completo de usuários, segundo alegação · Gamdom, an online crypto casino and sportsbook founded in 2016. Alleged target: the full user database, with 15,420,003 accounts across 146 columns. No affected product version was cited.
Exploitation: Data extortion listing dated 2026-10-26, with no confirmation from Gamdom and no independent verification. The group published a 100-account sample as proof. Reported by Dark Web Informer and Daily Dark Web.
Fix: No product fix applies. User mitigations cited: change the Gamdom password, enable two-factor authentication, and use only official channels.
Vector: According to WhiteArmor's listing, access came through an old, never-rotated internal machine account with administrative privileges. This is a credential management failure; no product vulnerability was cited in the sources.
More details: Daily Dark Web attributes recent claims against Whirlpool, J.B. Hunt, Hisense and LoveSac to WhiteArmor. The listing builds on Gamdom's recently reported hot-wallet theft; the authenticity of the user data remains unconfirmed. The listing claims combined account profits exceeding $1 billion. Gamdom had earlier said it found an unauthorized connection on an automation server and took its systems offline, according to Daily Dark Web.