Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
The Curaçao Gaming Authority has contained unauthorized access to its online gaming portal but has not yet determined what information, if any, was viewed.
The regulator said on September 17 that a forensic investigation remains underway. The source of the access has been identified, while extra monitoring and security controls are now in place.
Good to Know
- CGA says its core technical infrastructure shows no identified compromise so far.
- The portal handles online gaming licence applications, supplier applications and regulatory reporting.
- CGA has not confirmed any data theft and has not disclosed when the unauthorized access began.
CGA Checks Whether Licensing Data Was Accessed
CGA and its service provider activated incident response procedures after detecting the access. The provider then started forensic work to establish what happened and determine the scope.
The regulator said:
“While the unauthorized access has been contained, the investigation remains ongoing and has not yet established the full scope of the incident. The CGA is currently assessing whether and which information was accessed, as well as the potential consequences arising from such access.”
So far, investigators have not found evidence that core CGA technical infrastructure was compromised. However, the regulator said it remains too early to assess the overall impact because of the type of information it holds.
That distinction matters because the portal can contain much more than basic company details. The CGA privacy policy says licensing records can include contact information, identification numbers, financial information, licence information, administrative violation data and criminal data used for due diligence.
Portal Sits at Center of Curaçao Licensing
The online portal became a core part of the Curaçao gambling licensing system after the National Ordinance on Games of Chance, known as the LOK, took effect on December 24, 2024. The law placed online gaming regulation under the CGA.
Operators seeking an online gaming licence must submit applications through the portal. Suppliers can also use it for licence applications, while existing licensees file periodic reports, incident reports and regulatory changes through the same system. Applications cannot be submitted outside the portal.
CGA also uses licensing applications to assess ownership, management and compliance information. Under the LOK, eligible applicants must be legal entities established under Curaçao law and meet local management requirements.
The regulator said it will contact individuals, applicants, licensees or other stakeholders directly if investigators conclude that their information may have been affected.
CGA added:
“Further updates will be provided as appropriate as additional facts are established. As the matter remains subject to investigation and engagement with the relevant authorities, no further details can be disclosed at this time.”
FAQ
Was Curaçao Gaming Authority data stolen?
CGA has not confirmed that any data was taken. Investigators are still assessing whether information was accessed.
Was the core CGA system compromised?
CGA said investigators have found no compromise of core technical infrastructure at the current stage.
What information goes through the CGA gaming portal?
The portal handles online gaming and supplier licence applications, regulatory reports and supporting licensing documentation. CGA records can include identification, financial, corporate and due diligence information.
When did the Curaçao LOK take effect?
The National Ordinance on Games of Chance entered into force on December 24, 2024.
The post Curaçao Gaming Authority Investigates Unauthorized Portal Access appeared first on iGaming.org.