Curaçao Gambling Regulator Shuts Down Online Licensing Portal Following Major Hack

In an official press release from last week, the Curaçao Gambling Authority (CGA) announced that it is closing its online licensing portal following an earlier hacking incident that resulted in over 40,000 documents being publicly released. CGA Closes Portal Following Hack According to the CGA, the discontinuation of the portal also involves the termination of the related service arrangements supporting its operation. The CGA explained that it is taking the necessary steps to phase out the existing platform and associated services while ensuring the continued and uninterrupted operation of its regulatory functions. The news comes a few weeks after Berlin-based cybersecurity researcher Lilith Wittmann hacked the CGA’s platform. On September 17, 2026, the CGA reported that it had detected unauthorized access to its online gaming portal, confirming that the incident had been contained and its source identified. The regulator stated that it and its service provider promptly activated their incident response procedures upon detecting the breach, following which the provider launched a forensic investigation. A few days later, Wittmann claimed responsibility for the hack. She allegedly accessed ownership declarations, license applications, regulatory assessments, tax documents, and many more. The breach led to details about companies whose ownership has often been difficult to confirm through public corporate registers. The CGA explained that it remains committed to safeguarding the integrity of its regulatory functions and information assets. It acknowledged that the transition may present challenges for operators and appreciates their continued cooperation and understanding throughout this period. What Happens to Current License Owners? It should be noted that the discontinuation of the portal does not affect the validity of existing licenses, the obligations of licensed operators, or the CGA’s ongoing regulatory and supervisory functions. All licensing, compliance, and supervisory activities will continue under alternative arrangements while an interim solution is being implemented, the CGA explained. Further details on these arrangements should have already been communicated, as an announcement was expected no later than October 9, 2026, according to the CGA. However, at the time of writing of this article on October 12, the regulator has not revealed any information about an interim solution.