Crypto Casino Gamdom Targeted by Ransomware Group Whitearmor Demanding $15 Million Bitcoin Ransom

TechFlow reports. On October 27, according to Bitcoin.com News, the ransomware group Whitearmor claimed on October 26 that it had stolen 15,420,003 account records from the crypto casino Gamdom, with each account containing 146 data fields, and demanded a ransom of $15 million in Bitcoin, threatening to expose sensitive customer information otherwise. The organization has posted a roughly 437KB JSON sample containing approximately 100 records on its leak site as purported evidence, claiming that the cumulative profits associated with these accounts exceed $1 billion, without disclosing the calculation methodology. It is alleged that the attackers exploited an internal service account whose credentials had not been rotated for an extended period but still retained administrative privileges.

Previously, Gamdom fell victim to a hot wallet attack on October 13. Founder Felix Römer acknowledged losses exceeding $3 million, while blockchain researcher vxdb estimated the total stolen funds across multiple networks at approximately $4.2 million. The platform suspended operations before resuming on October 16, stating that user balances remained unaffected. Gamdom disputed the scale of the 15.4 million accounts but admitted that usernames, email addresses, and gambling activity data may have been exposed, while confirming that identity verification documents remained untouched.