Curaçao Scraps Gambling Licensing Portal After Data Breach

The Curaçao Gaming Authority has permanently retired its compromised licensing portal and ended its use of the external provider for regulatory services. The breach exposed personal and confidential information belonging to gambling license holders.


Good To Know

  • Existing CGA licenses remain valid, and operators must continue meeting regulatory obligations.
  • The authority has filed complaints in Curaçao, Germany and the Netherlands.
  • An independent technical investigation will establish the full impact.

The CGA plans to manage its replacement platform internally, reducing reliance on outside providers. It had scheduled a temporary portal for October 19 to support applications and supervision while preparing the permanent system.

Its statement identified the internal system, digital seal and license register as ready for independent security checks. The client portal still required adjustments before testing. A digital seal allows a website to display its CGA licensing status.

Investigation Continues As CGA Rebuilds Its Systems

According to the regulator, a German security researcher accessed the externally managed portal and database without authorization between December 2025 and September 2026. The CGA discovered the breach on September 17 and subsequently took the platform offline.

The authority has hired specialists to seek removal of published information and is considering civil action alongside the complaints filed in three jurisdictions.

Meanwhile, the replacement comes during a broader overhaul of Curaçao gambling regulation. The National Ordinance on Games of Chance, or LOK, took effect in December 2024, replacing master licenses and sublicenses with direct CGA supervision.

The regulator has recruited 14 employees for licensing, supervision and enforcement since the reforms began.


FAQ

Does The Portal Closure Cancel Existing Licenses?

No. The CGA says the closure does not invalidate licenses or remove compliance obligations.

Has The CGA Confirmed Full Replacement Portal Operations?

The statement gives an October 19 launch target and describes outstanding testing. It does not confirm that every replacement service became operational.

The post Curaçao Scraps Gambling Licensing Portal After Data Breach appeared first on iGaming.org.