Curaçao Gambling Regulator Hacked, Data Exposure Still Unknown

The Curaçao Gaming Authority (CGA) is investigating a breach of its online gaming portal, according to a statement dated September 17.

The regulator said it had identified the source of the access and contained it. Its service provider has begun a forensic investigation following the activation of incident response procedures.

The investigation has not found a compromise of the CGA’s core technical infrastructure. However, the authority cautioned that it was too early to determine the incident’s overall impact.

Data Exposure Remains Under Review

Investigators are still establishing whether information was accessed and what consequences may follow. Additional monitoring and security precautions are in place. The CGA said it would directly notify individuals, applicants, licensees or other stakeholders if the findings indicate their information may have been affected.

Further updates will follow as facts emerge. The authority withheld additional details while its investigation and engagement with relevant authorities continue.

A Central Portal for Gambling Licenses

The affected platform forms part of Curaçao’s gambling licensing system. According to the CGA’s portal guidance, online gaming and supplier license applications must go through the portal; applications submitted elsewhere are not considered.

The system also supports regulatory reporting, with licensees required to submit periodic reports, incident reports and changes through it.

Application materials listed on the portal include business and corporate information, personal history disclosures and business plans. These requirements explain why the platform’s security matters to operators and the people behind them.

Those submission requirements do not establish which records, if any, were exposed in this incident. That remains the central question for the investigation.