October 13–14, 2026: The crypto casino Gamdom had its hot-wallet system breached on October 13. The founder confirmed the breach on October 14 and said the operator lost just over $3 million after acting to stop the drain. Analysts tracking the wallets estimate $3 million to $4.2 million. Separately, the extortion group WhiteArmor posted a claim on October 26 to have taken data on 15.4 million accounts and demanded about $15 million in Bitcoin. The company disputes that claim. The catalog entry records the confirmed theft only.
The confirmed part: hot-wallet theft
The founder, Felix Romer, confirmed the breach of the hot-wallet system on October 14 and gave the loss as just over $3 million. The reporting we reviewed does not include a published root cause.
The disputed part: the extortion claim
WhiteArmor posted its claim on its leak site on October 26. The group says it took 15,420,003 accounts across 146 database columns, and it claims more than $1 billion in combined value without explaining how it calculated that. It has not published a breakdown of the fields. Gamdom disputes the scale and says attackers reached only a few hundred accounts. The reporting says the full database remains secure. The claim is unverified, and our entry does not count it.
Verified and unverified
- Confirmed by the company: the hot-wallet breach and the loss of just over $3 million.
- Reported by analysts: a loss between about $3 million and $4.2 million.
- Unverified: the WhiteArmor record count, the $15 million demand, the claimed $1 billion in value, and whether any personal data was taken.
Who may be affected
- Gamdom account holders, particularly anyone with balances on the platform.
- Anyone contacted by a group claiming to hold their data.
What to do
- If you have a Gamdom account, change your password and turn on two-factor authentication. Do not reuse the password on other sites.
- Check your account for logins and transactions you do not recognise, and report them through the site's official support channel.
- Do not pay an extortion demand. Payment does not guarantee the data will be deleted.
- Do not send crypto to any "recovery" service or account that contacts you.
- Be cautious with emails claiming to hold your data. Check any claim against the company's official statements, not the message itself.