Cyberattack Forces Curaçao Regulator to Launch Temporary Online Portal

The Curaçao Gaming Authority (CGA) announced it would soon launch a replacement licensing portal after a recent cyberattack exposed more than 40,000 documents connected to the region’s gambling sector. The regulator believes this step will better protect the integrity of licensing and supervision operations. As a result, the CGA will not restore the compromised platform. Curaçao Aims to Reassure Gambling Stakeholders In a recent statement, the CGA revealed that its new temporary portal would launch on October 19, 2026. The new system will handle license applications and other regulatory tasks while the authority develops a long-term proprietary platform. This approach should also help avoid another cyberattack of that scale. The previous breach began in December 2025 and continued until September 2026. Berlin-based cybersecurity researcher Lilith Wittmann claimed responsibility for the intrusion. The data she reportedly accessed and published includes ownership declarations, license applications, regulatory assessments, and tax documents. This breach affected most licensed operators and may have revealed sensitive information. The CGA said it had notified authorities in Curaçao, Germany, and the Netherlands. By each taking responsibility, we can improve the system, strengthen trust, and continue developing an online gambling sector that makes a substantial financial contribution to Curaçao. CGA statement According to the regulator, this breach could undermine Curaçao’s reputation as an international gambling hub and erode license holders’ trust. The CGA is now focused on protecting confidential data and limiting the use and spread of the leaked materials. To avoid a similar incident, the regulator has bolstered its security measures and shut down the portal for an external investigation. Existing Gambling Licenses Remain Valid Curaçao authorities have reassured stakeholders that the temporary platform will pass robust security checks before its launch. According to the CGA, the client portal was still under development, while the internal system, digital seal, and license register were ready for independent testing. All systems will pass thorough tests for potential vulnerabilities and operational issues. This cyberattack may trace its origins to Curaçao’s 2023 gambling overhaul and the following National Ordinance on Games of Chance (LOK). This new framework replaced the old licensing system, aiming to improve oversight, introduce robust safety mechanisms, and address international criticism toward the region’s gambling industry. However, the fast pace of these reforms might have come at a cost. To achieve their goals, Curaçao authorities initially relied on external specialists for technology, licensing, and supervision. The region aimed to build local expertise and reduce reliance on outside providers. However, this transition period revealed vulnerabilities. The CGA has reassured operators that the end of the old portal does not invalidate existing licenses.