Is Fanatics safe? There are really two separate questions hiding inside that one, and this month they have two different answers. Is it safe to place a bet through Fanatics Sportsbook — meaning, is it licensed, does it verify who you are, will your winnings actually be yours? Yes. Is it safe to trust the company with your personal data right now, given a September 2026 breach claim against its parent? That one is murkier, and worth reading before you assume the answer is automatically yes just because the sportsbook itself is regulated.
Betting Safety: What the License Actually Buys You
Fanatics Betting and Gaming operates under state gaming licenses in 23 states plus Washington D.C. as of August 2026, inherited from its $225 million purchase of PointsBet’s US sportsbook business. Every one of those licenses comes with mandatory geolocation checks on signup and before each wager, so an account only works from inside a licensed state. That structure is what makes the betting side of Fanatics safe in the way the word usually means for a sportsbook: regulated money handling, a state agency to complain to, and rules that exist whether or not you ever need them.
What signup actually asks for: legal name, date of birth, address, phone number, email, and the last four digits of your Social Security number — the standard identity set every US-licensed sportsbook collects to confirm age and identity within seconds, not a Fanatics-specific overreach.
The September 2026 Breach Claim, Read Carefully
On September 20, 2026, a ransomware and extortion group calling itself N0n listed “Fanatics (global sports commerce platform)” on its dark-web leak site. The group claims to hold about 108 GB of data: roughly 46,900 order files, accounts-payable documents tied to league and brand partners, customer balances, a bank transaction archive, and customer tax-exemption certificates. That description — orders, AP invoices, tax-exemption paperwork — reads like the retail and collectibles commerce side of Fanatics, not sportsbook account credentials specifically. It is also, as of this writing, an attacker claim only. Fanatics has not publicly confirmed a breach, and security researchers tracking the listing describe N0n as a newly observed group whose claims should be treated with caution until independently verified.
Claimed breach date: listed September 20, 2026
Claimed data volume: ~108 GB, ~46,900 order files
Prior unconfirmed claim: a separate 2.6-million- record database offered for sale, surfaced November 28, 2025
Company confirmation: none published as of this writing
This is not the first time. A separate, also-unconfirmed claim surfaced in late November 2025 involving an alleged database of roughly 2.6 million Fanatics customer records offered for sale on the open web. Neither incident has a confirmed scope, and neither has been tied specifically to sportsbook login credentials or payment methods stored on the betting app. That distinction matters, but it is not a reason to ignore the pattern — two separate breach allegations against the same parent company within a year is worth factoring into how much you trust the brand with sensitive data generally.
What To Actually Do With That Information
Nothing about an unconfirmed claim means close your account or stop betting. It does mean the ordinary account-hygiene habits are worth taking seriously right now: a password used only for Fanatics, not recycled from another site; skepticism toward any “verify your account” email or text that asks you to click a link rather than log in directly through the app; and attention to Fanatics’ own responsible-disclosure and support channels if a real breach notification does eventually go out. None of that is unique to Fanatics — it is what any account holder should do after any company they use gets named in a leak-site claim, confirmed or not.
The Other Kind of Safety: Responsible Gambling Tools
Separate from data security, Fanatics builds in the standard set of account-level controls: deposit limits set daily, weekly, or monthly (a decrease takes effect immediately; an increase waits out the prior limit’s period first), wager limits, time-outs, and self-exclusion that closes the account for a minimum of one year with no early reactivation. Those tools live under Responsible Gaming settings in the app. They are what “safe” means for betting itself — a bounded activity with an exit, not an open-ended one.
Put together: Fanatics is safe to bet through under its state licenses, and the identity checks it runs are the same ones every regulated competitor runs. Whether it is fully safe with your data this month is a genuinely open question the company itself hasn’t answered yet. Use the responsible-gaming tools, use a unique password, and treat any account as entertainment spending, not income. 21+ where legal. 1-800-GAMBLER.