Skip to content
WhiteArmor Targets Gamdom with $15 Million Ransom Demand

WhiteArmor Targets Gamdom with $15 Million Ransom Demand

First seen 27 Oct 2026, 06:43 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 27, 2026 at 08:13 UTC
  • •WhiteArmor claims to have breached Gamdom, accessing a database of over 15 million user accounts.
  • •The breach was facilitated through an unrotated internal machine account with admin privileges.
  • •WhiteArmor is demanding a ransom of $15 million in Bitcoin for the compromised data.

WhiteArmor, a newly emerging ransomware group, has claimed to have breached Gamdom, an unregulated crypto casino and sportsbook founded in 2016. The group reportedly accessed Gamdom's full user database, which includes over 15 million accounts and a total profit value exceeding $1 billion. The breach is attributed to an internal machine account with administrative privileges that had not been rotated for years. Gamdom's founder, Felix Romer, estimated losses at over $3 million, while on-chain analysts suggest the figure could be as high as $4.2 million. WhiteArmor is demanding a ransom of $15 million in Bitcoin and has published a sample of 100 accounts as proof of the breach. The authenticity of the claims and the extent of the compromise have not yet been independently verified.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-26
WhiteArmor claims Gamdom breach
WhiteArmor announced they accessed Gamdom's user database and demanded a $15 million ransom.
Ransomware.Live
2026-10-26
Dark Web Informer reports on breach
Dark Web Informer shared WhiteArmor's claims about the breach and ransom demand on social media.
X

More articles in this cluster (2)

Following this threat?

Track Gamdom in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (3)

1 / 3

Common questions

What data was compromised?
WhiteArmor claims to have accessed Gamdom's full user database, which includes over 15 million accounts.
Is the ransom demand confirmed?
Yes, WhiteArmor is demanding $15 million in Bitcoin, but the authenticity of the claim is still under verification.
What should Gamdom users do?
Users should monitor for phishing attempts and consider changing their passwords, as their data may be compromised.