The Curaçao Gaming Authority (CGA) has announced the implementation of a replacement licensing portal following a significant cyberattack that exposed more than forty thousand documents connected to the region’s online gambling sector. In response to the breach, the regulator confirmed it will not restore the compromised platform, choosing instead to deploy secure infrastructure designed to protect the integrity of future supervisory operations.
The security compromise, which began in December 2025 and persisted until September 2026, resulted in the exposure of sensitive files including ownership declarations, license applications, regulatory assessments, and tax documents affecting the majority of licensed operators. Berlin-based cybersecurity researcher Lilith Wittmann publicly claimed responsibility for the intrusion. In response, the CGA formally notified authorities across Curaçao, Germany, and the Netherlands.
Reassuring stakeholders and deploying temporary systems
To maintain regulatory continuity, the CGA rolled out a temporary licensing portal on October 19, 2026, to handle ongoing applications and administrative tasks while a robust, long-term proprietary platform is finalized.
The CGA stated
“By each taking responsibility, we can improve the system, strengthen trust, and continue developing an online gambling sector that makes a substantial financial contribution to Curaçao.”
The CGA acknowledged that the breach threatened Curaçao’s standing as an international gambling hub and eroded trust among license holders. Consequently, the authority subjected the temporary platform and its internal verification systems to rigorous independent testing and vulnerability assessments prior to deployment. Crucially, the regulator reassured operators that the decommissioning of the old portal does not invalidate existing gambling licenses.
Regulatory overhaul and background reforms
Industry analysts note that the vulnerabilities may be tied to the fast-paced implementation of Curaçao’s 2023 gambling overhaul under the National Ordinance on Games of Chance (LOK). Designed to replace legacy licensing structures, the LOK aimed to elevate supervisory standards and address longstanding international criticism regarding the jurisdiction’s oversight.
During the transition, authorities relied heavily on external technology and supervision providers to build local expertise. The recent security incident highlighted underlying vulnerabilities during this transitional phase, prompting the CGA to permanently overhaul its digital infrastructure and enforce stringent security protocols.
