Table Of Content :

Home News Curaçao Gaming Authority Reports Portal Breach to Authorities in Three Countries

Curaçao Gaming Authority Reports Portal Breach to Authorities in Three Countries

From exclusive events and interviews to real-time market trends, Ace Alliance brings you unbiased, well-informed, and data-driven content. Our editorial team adheres to strict editorial standards, ensuring that the information you receive is not only relevant but also trustworthy.

Built by market experts hosting events since 2023, with our first event in Riga, Latvia gathering over 300 top level iGaming industry executives, Ace Alliance is able to provide you with reliable information from direct interaction with experts and leaders in the sector.

Altay Celikkaya

Content Manager

Updated: 20/10/26

Reading Time: 2 minutes

The regulator has detailed cross-border complaints, data-removal efforts, and possible civil action following the security breach affecting its gambling licensing platform. The Curaçao Gaming Authority (CGA) has disclosed complaints and reports to authorities in Curaçao, Germany and the Netherlands following unauthorised access to its online gambling licensing portal.

In its 19 October statement, the regulator outlined new measures to remove exposed information, investigate the incident and consider further legal action. The update shifts attention from containing the breach to addressing its consequences.

Curaçao Gaming Authority reports its licensing portal breach to authorities in three countries.

Regulation & Compliance

Key Takeaways From the CGA's Latest Breach Response

The CGA has filed complaints and reported the incident to authorities in three countries.
Specialist companies have been engaged to remove exposed information from the internet.
An independent technical investigation will assess the attack’s impact and consequences.
The regulator is considering civil proceedings while developing replacement licensing infrastructure.

CGA Pursues Cross-Border Action

The regulator confirmed it has reported the incident to authorities in Curaçao, Germany and the Netherlands. According to the CGA, a Germany-based digital security researcher accessed its licensing portal without authorisation and published confidential information belonging to online gambling licence holders.

The authority characterises the conduct as criminal, although its statement does not identify a court conviction.

The CGA said:

CGA is also considering civil legal action and remains in regular contact with the sector.

Specialist firms have also been commissioned to remove information available online. An independent technical investigation will examine the breach’s impact. The regulator has not confirmed whether it has recovered or removed all exposed information.

External Portal Management Faces Scrutiny

An external company managed the affected portal and database during Curaçao’s regulatory transition. The CGA explained that it initially needed external expertise to support licensing and supervision while it developed internal capabilities.

The latest announcement follows the previously reported CGA security breach and the subsequent permanent closure of the licensing portal. However, the cross-border reports and data removal measures represent a separate stage in the regulator’s response.

What Happens Next for Operators?

The CGA scheduled a temporary licensing portal for 19 October, including a licence register and digital verification system. The statement does not confirm that every service became operational as planned. Existing licences remain valid, and operators must continue meeting their regulatory obligations.

For suppliers, affiliates and other industry partners, the incident reinforces the importance of independent licence verification and due diligence. Next developments will depend on the findings of the technical investigation, potential legal proceedings, and the restoration of secure licensing services.