The NHS has become the latest UK public service website to fall victim to a cyberattack, with its health app review site now redirecting visitors to offshore gambling platforms.
The page, my-therappy.co.uk, originally launched in 2013 by the Neuro‑rehabilitation Team at Northern Devon Healthcare NHS Trust, was designed to help clinicians and patients by reviewing apps for stroke recovery.
After the trust merged with Royal Devon University Healthcare NHS Foundation Trust in 2022, the site continued to serve as a resource. But instead of health guidance, the page now promotes “Non UK Casinos” and “Betting Sites Not on GamStop,” encouraging users to bypass the UK’s self‑exclusion scheme.
At the time of writing, iGamingToday can confirm the compromised page remains live. The content includes introductions such as “There’s a quiet exodus happening. UK players are slipping past GamStop’s grip and into the arms of non‑UK casinos, where rules feel more like polite suggestions,” from a certain Daniel Reeves, whose bio on the site calls “a seasoned writer and analyst specialising in online casinos, sports betting and iGaming trends for UK audiences.”
A spokesperson for Royal Devon University Healthcare NHS Foundation Trust acknowledged the breach to Digital Health News, which first reported the news, saying: “We have raised this with our digital and cyber security teams for investigation.
“We are currently establishing the status of the website domain and will provide a further update once we have completed our enquiries. We take matters relating to online safety and security seriously and are looking into this as a priority.”
A year of cyberattacks for the gambling industry
The past year has seen a steady stream of public websites compromised and turned into advertising platforms for offshore gambling operators.
Just last month, it was revealed that 16 links on the Scottish Borders council’s directory, which should have directed users to council services, were hijacked and instead sent visitors to gambling sites outside UK law.
According to the BBC, many of those links had once been hosted on a platform called Online Borders, closed eight years ago. Councils were told to build their own sites, but the old domains remained active and were later repurposed to funnel traffic to a single portal promoting “top noGamstop casinos.”
Also, in June, Old Catton Parish Council in Norfolk discovered its own website had been compromised.
The issue has even spread beyond the UK. Just last week, iGamingToday published an exclusive report revealing that Nigeria’s Independent National Electoral Commission (INEC) website had been breached.
Pages on inecnigeria.org, normally used to share election information, were instead hosting English and French‑language casino promotions and sending users to unlicensed operators.



for early access to the latest igaming videos!

and get the latest igaming news first!




