Cyberattack Forces Curaçao Regulator to Launch Temporary Online Portal
Key Points The data breach exposed tens of thousands of sensitive documents Authorities decided not to restore the previous platform A new temporary portal will ensure continued operations
Key Points
The data breach exposed tens of thousands of sensitive documents
Authorities decided not to restore the previous platform
A new temporary portal will ensure continued operations
The Curaçao Gaming Authority (CGA) announced it would soon launch a replacement licensing portal after a recent cyberattack exposed more than 40,000 documents connected to the region’s gambling sector. The regulator believes this step will better protect the integrity of licensing and supervision operations. As a result, the CGA will not restore the compromised platform.
Curaçao Gaming Authority
more than 40,000 documents
licensing and supervision
Curaçao Aims to Reassure Gambling Stakeholders
In a recent statement, the CGA revealed that its new temporary portal would launch on October 19, 2026. The new system will handle license applications and other regulatory tasks while the authority develops a long-term proprietary platform. This approach should also help avoid another cyberattack of that scale. The previous breach began in December 2025 and continued until September 2026.
October 19, 2026
long-term proprietary platform
avoid another cyberattack
Berlin-based cybersecurity researcher Lilith Wittmann claimed responsibility for the intrusion. The data she reportedly accessed and published includes ownership declarations, license applications, regulatory assessments, and tax documents. This breach affected most licensed operators and may have revealed sensitive information. The CGA said it had notified authorities in Curaçao, Germany, and the Netherlands.
Lilith Wittmann
notified authorities
According to the regulator, this breach could undermine Curaçao’s reputation as an international gambling hub and erode license holders’ trust. The CGA is now focused on protecting confidential data and limiting the use and spread of the leaked materials. To avoid a similar incident, the regulator has bolstered its security measures and shut down the portal for an external investigation.
erode license holders’ trust
use and spread
bolstered its security measures
Existing Gambling Licenses Remain Valid
Curaçao authorities have reassured stakeholders that the temporary platform will pass robust security checks before its launch. According to the CGA, the client portal was still under development, while the internal system, digital seal, and license register were ready for independent testing. All systems will pass thorough tests for potential vulnerabilities and operational issues.
robust security checks
ready for independent testing
pass thorough tests
This cyberattack may trace its origins to Curaçao’s 2023 gambling overhaul and the following National Ordinance on Games of Chance (LOK). This new framework replaced the old licensing system, aiming to improve oversight, introduce robust safety mechanisms, and address international criticism toward the region’s gambling industry. However, the fast pace of these reforms might have come at a cost.
2023 gambling overhaul
National Ordinance on Games of Chance
international criticism
To achieve their goals, Curaçao authorities initially relied on external specialists for technology, licensing, and supervision. The region aimed to build local expertise and reduce reliance on outside providers. However, this transition period revealed vulnerabilities. The CGA has reassured operators that the end of the old portal does not invalidate existing licenses.
external specialists
local expertise
revealed vulnerabilities
does not invalidate
curacao
cyberattack
regulation
