Crypto Casino Gamdom Faces $15M Bitcoin Ransom After Multimillion-Dollar Hack

Hacking Syndicate Whitearmor Demands $15M in Bitcoin After Gamdom Wallet Hack

Crypto casino Gamdom has barely recovered from a multimillion-dollar wallet breach, and now another security crisis is unfolding. Several reports say that the cyber-extortion group Whitearmor claims to possess a database containing 15,420,003 customer accounts—and wants $15 million in bitcoin to keep it private.

The demand surfaced Oct. 26, less than two weeks after Bitcoin.com News reported that hackers drained more than $3 million from the gambling platform’s hot wallets. However, Gamdom disputes the claimed database size, leaving a potentially enormous exposure hanging over millions of alleged account records.

A $15 Million Demand for 15.4 Million Accounts

Whitearmor published Gamdom details on its extortion site, claiming access to 146 data fields per account. The group posted a roughly 437-kilobyte JSON sample containing approximately 100 records as purported evidence. The attackers allegedly exploited an aging internal machine account whose credentials had never been rotated, retaining administrative privileges long after its creation.

Gambling Lore reported that a hacker identifying as Veryso claimed to have extracted the records on Oct. 13, coinciding with Gamdom’s wallet breach. The outlet reportedly verified one longstanding user’s record containing login timestamps, an IP address, and betting information. That limited confirmation doesn’t establish that 15.4 million accounts were compromised.

Gamdom’s Earlier $3 Million Wallet Breach

On Oct. 13, Gamdom suffered a separate attack targeting its operational cryptocurrency wallets. At the time, Gamdom founder Felix Römer acknowledged losses exceeding $3 million, while blockchain researcher vxdb estimated approximately $4.2 million swiped across several networks. The platform temporarily suspended operations before returning Oct. 16, assuring customers their balances remained protected.

Römer initially disputed claims of widespread data extraction, suggesting attackers possessed only a few hundred accounts. Subsequent statements acknowledged possible exposure of usernames, email addresses, and gambling activity while maintaining that identity verification documents were unaffected.

An Unverified Database With Expensive Consequences

Whitearmor’s demand exceeds Gamdom’s acknowledged wallet losses several times over. The group also claims the compromised accounts represent more than $1 billion in combined profit value, without explaining its calculation. Neither the complete database nor its alleged scale has been independently verified. No ransom payment has been publicly confirmed.

For Gamdom’s customers, the unresolved question extends beyond stolen cryptocurrency to whether their gambling histories and personal information will eventually circulate online. Gamdom’s reported data breach and ransom demand come amid a wave of software exploits and data compromises this year, potentially intensified by the growing use of artificial intelligence (AI) in cyberattacks.