Paddy Power said that it received information in May that an individual based in Toronto, Canada, had an archive of Paddy Power’s customer names, usernames, addresses, emails, telephone numbers, birthdays and security questions.
The company secured two court orders in Canada last month to order the individual, who has not been charged with any crime yet, to surrender his database and allow police to search his computer equipment and financial records.
The number of customers affected by the security breach equates to nearly 30% of Paddy Power’s online gamblers in 2010.
“We sincerely regret that this breach occurred and we apologize to people who have been inconvenienced as a result,” Paddy Power’s managing director of online operations, Peter O'Donovan, said.