This week delivered a powerful mix of market momentum, regulatory disruption, and fresh cyber-risk signals across the global iGaming landscape. North America continues to dominate growth headlines — with record U.S. online casino revenue, Ontario’s digital expansion, and Missouri officially becoming the 39th U.S. state to launch legal online sports betting. Meanwhile, the UK’s dramatic tax overhaul is set to reshape operator economics for years ahead, prompting strategic reassessments across Europe. On the security front, two major global breaches — including a 33.7M-record leak — introduce new threat vectors that operators must monitor closely as credential-based attacks rise heading into 2026.
Canada’s gambling market is increasingly driven by iGaming growth, with online casinos and digital bets pulling share from traditional casinos. Analysts estimate total gambling revenue will reach ≈ US$15.6 bn in 2025, with online casino revenues forming the bulk; the shift signals long-term growth potential for iGaming operators in North America. Yogonet
US online casinos report record-breaking October 2025: $874.3 million in total revenue. The surge — driven by top regulated states — underscores the resilience and growth-trajectory of the US online-casino vertical going into Q4. Play USA
New regulated sportsbook/casino market in Missouri launches Dec 1 — early activity strong. Initial geolocation checks and account sign-ups suggest pent-up demand for regulated online betting in previously closed states. Casino.org
● Global online-casino market forecast update — strong mid-term growth path. A new report estimates the global online gambling market will grow at a CAGR of ~8.1% between 2025 and 2030. Investing.com UK
● Las Vegas casinos post unexpected revenue uptick in October, despite declining tourist numbers. Casinos in Clark County, NV — including the Strip — reported a ~5% year-on-year increase in October gambling revenue, totalling $1.17 billion, even though visitor numbers dropped. iGaming Brazil
Law & Regulation
UK to nearly double online gaming duty — remote gaming rate jumps from 21% to 40% (effective 1 Apr 2026). This sharp increase marks one of the largest tax rises on online gambling in decades and is expected to reshape operators’ UK profitability models and business strategies. GOV.UK
Flutter Entertainment warns UK duty hike could reduce EBITDA by about US$320 m in 2026 (and ~US$540 m in 2027) before mitigation efforts. As one of the largest global operators, this signals potential impact across UK-exposed portfolios — likely triggering strategic shifts, cost optimizations or market reallocations outside the UK. Reuters
Missouri becomes 39th US state to go live with legal online & retail sports betting as of December 1 — new regulated US market opens. The launch activates eight licensed online sportsbooks, offering US iGaming operators a fresh regulated-entry opportunity ahead of the 2026 sports calendar. Saturday Down South
Geo-compliance vendor data: 2.6 M+ geolocation checks, 250,000+ active accounts first 24 h — strong demand for regulated sportsbooks in Missouri. Initial numbers suggest robust consumer appetite in new states, validating growth potential for US-facing operators expanding into newly legalized markets. Casino.org
European regulatory tightening continues — will drive pressure on grey-market/off-shore operators; licensed operators stand to benefit from improved enforcement clarity. As jurisdictions like the UK tighten duty and enforcement, demand for transparent, compliant platforms increases — shifting competitive balance toward regulated and well-managed operators. Lexology
Hacks & Data Breaches
Coupang breach exposes data of 33.7 million users. South Korean e-commerce giant Coupang disclosed a massive leak involving names, emails, phone numbers and order histories for nearly 34 million customers. Impact on iGaming: This dump dramatically increases the volume of fresh identity data available to fraud networks, fueling KYC fraud, account takeover attempts, bonus abuse, and payment-method spoofing across Asia-facing sportsbooks and casinos. Reuters
CodeRED emergency alert platform hit by ransomware; clear-text passwords leaked. A ransomware attack on OnSolve’s CodeRED system caused downtime and leaked user emails and unencrypted passwords, expanding the pool of compromised login credentials. Impact on iGaming: Password reuse is widespread, so these credentials will rapidly appear in botnets used for credential stuffing on iGaming platforms — increasing risks of unauthorized logins, wallet drain, and VIP-account compromises. Malware Bytes
Final words
As Q4 closes, the industry stands at a defining intersection: rapid digital adoption, expanding U.S. regulation, and tightening European oversight — all while cyber-risk escalates in both scale and sophistication. Operators that stay adaptive, compliance-ready, and security-focused will be best positioned to capture upcoming opportunities in 2026. ONSEC will continue monitoring global developments to keep your teams informed, protected, and ahead of emerging threats.
is a boutique penetration testing company with over 15 years of experience and more than 450 successful projects completed worldwide. We specialize in securing the iGaming, betting, and gaming industries, delivering tailored expertise and trusted protection.
To keep our clients informed and ahead of emerging threats, we created this newsletter. Here, you’ll find critical updates on industry trends and analytics, law and regulatory changes, and real-world hacks and data breaches. Stay secure with ONSEC!
Leave a comment