Crypto casino Gamdom faces a $15 million bitcoin ransom demand after cyber-extortion group Whitearmor claimed to have stolen records belonging to 15.4 million accounts. The allegation surfaced less than two weeks after a separate hot-wallet attack cost the gambling platform more than $3 million. Gamdom disputes the alleged database’s size, while the attackers threaten to expose sensitive customer information.
Key Takeaways
- Whitearmor claims to possess 15.4 million Gamdom account records and demands $15 million in bitcoin.
- Gamdom previously acknowledged losing more than $3 million in an Oct. 13 hot-wallet attack.
- Gamdom disputes the alleged database’s size, and the full Whitearmor claim remains unverified.
Hacking Syndicate Whitearmor Demands $15M in Bitcoin After Gamdom Wallet Hack
Crypto casino Gamdom has barely recovered from a multimillion-dollar wallet breach, and now another security crisis is unfolding. Several reports say that the cyber-extortion group Whitearmor claims to possess a database containing 15,420,003 customer accounts—and wants $15 million in bitcoin to keep it private.
The demand surfaced Oct. 26, less than two weeks after Bitcoin.com News reported that hackers drained more than $3 million from the gambling platform’s hot wallets. However, Gamdom disputes the claimed database size, leaving a potentially enormous exposure hanging over millions of alleged account records.
A $15 Million Demand for 15.4 Million Accounts
Whitearmor published Gamdom details on its extortion site, claiming access to 146 data fields per account. The group posted a roughly 437-kilobyte JSON sample containing approximately 100 records as purported evidence. The attackers allegedly exploited an aging internal machine account whose credentials had never been rotated, retaining administrative privileges long after its creation.
Gambling Lore reported that a hacker identifying as Veryso claimed to have extracted the records on Oct. 13, coinciding with Gamdom’s wallet breach. The outlet reportedly verified one longstanding user’s record containing login timestamps, an IP address, and betting information. That limited confirmation doesn’t establish that 15.4 million accounts were compromised.
Gamdom’s Earlier $3 Million Wallet Breach
On Oct. 13, Gamdom suffered a separate attack targeting its operational cryptocurrency wallets. At the time, Gamdom founder Felix Römer acknowledged losses exceeding $3 million, while blockchain researcher vxdb estimated approximately $4.2 million swiped across several networks. The platform temporarily suspended operations before returning Oct. 16, assuring customers their balances remained protected.
Römer initially disputed claims of widespread data extraction, suggesting attackers possessed only a few hundred accounts. Subsequent statements acknowledged possible exposure of usernames, email addresses, and gambling activity while maintaining that identity verification documents were unaffected.
An Unverified Database With Expensive Consequences
Whitearmor’s demand exceeds Gamdom’s acknowledged wallet losses several times over. The group also claims the compromised accounts represent more than $1 billion in combined profit value, without explaining its calculation. Neither the complete database nor its alleged scale has been independently verified. No ransom payment has been publicly confirmed.
For Gamdom’s customers, the unresolved question extends beyond stolen cryptocurrency to whether their gambling histories and personal information will eventually circulate online. Gamdom’s reported data breach and ransom demand come amid a wave of software exploits and data compromises this year, potentially intensified by the growing use of artificial intelligence (AI) in cyberattacks.