Shuffle crypto casino alerts users after data breach exposes customer information
Table of contents
- Third-party service provider Fast Track compromised in security incident affecting Shuffle.com user data
- Unauthorised access exposed customer emails, names, addresses, transaction and betting information
- Account funds and passwords remain secure as no sensitive login credentials were stored with the vendor
Shuffle.com has informed users that customer data was exposed after an unauthorised party gained access to systems belonging to one of its third-party service providers.
The crypto casino operator confirmed that whilst user funds and account passwords remain secure, personal information including emails, names, addresses, and transaction data was compromised in the breach.
Third-party breach impacts customer data
The security incident affected Fast Track, a CRM provider used by Shuffle for various operational functions. The breach exposed sensitive customer information stored by the vendor, though Shuffle emphasised that no passwords or login credentials were maintained with this third-party provider.
The compromised data includes customer names, email addresses, physical addresses, transaction histories, and betting data according to Shuffle’s notification to users. The company has confirmed that all user accounts and cryptocurrency funds stored on the platform remain secure and unaffected by the incident.
Platform responds to security incident
Shuffle is continuing discussions with the provider regarding the severity and scope of the data exposure, whilst also investigating how the breach occurred. Fast Track has communicated that the security incident has been contained and poses no further risks to user data according to the casino’s statement.
The crypto gambling platform has expressed disappointment about the incident and reiterated its commitment to user security and safety. Users have been advised to remain vigilant against potential phishing attempts and ensure two-factor authentication is activated on their accounts as a precautionary measure.
Source: Noah, Shuffle’s Founder on X.com
Rising third-party security concerns
This incident adds to a growing list of third-party data breaches affecting major platforms in 2025. Recent high-profile cases have included Discord’s exposure of 70,000 government ID images through vendor 5CA, and numerous companies affected by the Salesforce-Drift breach chain.
The gaming industry has faced particular scrutiny over data protection practices, with operators increasingly relying on external vendors for various services including customer support, payment processing, and compliance functions. Industry experts have highlighted the challenges of maintaining security across extended supply chains where data often flows between multiple third-party providers.
Shuffle.com operates under a licence from the Curaçao Gaming Control Board and is owned by Natural Nine B.V., registered in Curaçao. The platform has not disclosed the total number of users affected by this latest security incident.
Do you have a story worth sharing?
Send it over to our editors!
