NHS health app’s site becomes the latest to be cyber attacked by illegal gambling adverts

By jili tutorial · September 5, 2026

Cyberattack Targets NHS-Backed Health App Website

The spread of illegal casino promotions on UK public-sector websites continues, with the latest incident involving a health app linked to the NHS. The website of My Therappy — a platform developed for stroke patients — appears to have been hijacked to advertise unlicensed gambling sites that are not registered with GAMSTOP.

The site, which has not published any official updates since October 2020, is now populated with promotional content for non-UK casinos. These posts are attributed to an author named “Daniel Reeves,” whose brief bio includes the dubious claim: “Put the kettle on; we’re about to unpack the best offshore gambling spots open to British punters in 2026.”

Who Is Daniel Reeves?

A “Daniel Reeves” also appears on other websites promoting illegal online casinos, though it remains unclear whether these are the same individual or part of a coordinated effort. In one instance, SBC News found Reeves described as a “Lead Casino Analyst” who “has spent more than a decade pressure-testing offshore and crypto casinos that serve US players.”

Background of My Therappy

My Therappy was launched in 2013 by Devon-based healthtech firm My Therappy as the first health app review site specifically for stroke patients. The platform was originally created and developed by the Northern Devon Healthcare NHS Trust, which has since been succeeded by the Royal Devon University Healthcare NHS Foundation Trust.

The company’s standalone X page (formerly Twitter) is still linked from the website, but it appears to have been inactive since early 2021.

NHS Trust Responds

The Royal Devon University Healthcare NHS Foundation Trust issued a statement to Digital Health News, which first reported the breach. The statement read:

“We have raised this with our digital and cyber security teams for investigation. We are currently establishing the status of the website domain and will provide a further update once we have completed our enquiries. We take matters relating to online safety and security seriously and are looking into this as a priority.”

Rising Trend of Illegal Gambling Ads on Public Sites

This incident follows a similar case two weeks prior, where the Scottish Borders Council’s website was compromised via an outdated backlog system. In that instance, illegal gambling adverts appeared on 16 out of 69 community council webpage listings.

Back in June, the Old Catton Parish Council unknowingly displayed an advertisement for an Indonesian online slots casino.

Ongoing Challenge for Regulators

These recurring incidents highlight the growing proliferation of unlicensed UK gambling firms that continue to target vulnerable consumers — including those who have self-excluded through GAMSTOP. The Gambling Commission, the Department for Digital, Culture, Media and Sport (DCMS), and the newly formed Illegal Gambling Taskforce face a significant challenge in clamping down on the black market, and urgent action is required.