Curaçao Gaming Regulator Hires Specialists to Remove Stolen Documents From the Internet

^{Cedric Pieters, Managing Director of the Curaçao Gaming Authority (CGA)}

The Curaçao Gaming Authority (CGA) has issued a new press release providing further details of a breach involving confidential operator data and outlining the steps taken in response.

According to the CGA, German cybersecurity researcher Lilith Wittmann gained unauthorized access to its licensing portal in December 2025. However, the regulator did not discover the breach until September 17, 2026 — approximately nine months later. The CGA said Wittmann had obtained and published confidential documents belonging to gambling operators.

The regulator has now said it contacted authorities in three jurisdictions: Curaçao, Germany, and the Netherlands.

The CGA has also hired specialist firms to remove the stolen information from the internet and commissioned an independent technical investigation to assess the impact of the breach.

The regulator is also considering filing a civil lawsuit.

Following the incident, the CGA permanently discontinued its previous licensing system and stopped using the provider’s services. A temporary portal was scheduled to launch on October 19.

The same address (portal.cga.cw) now displays a login page for the new system, though it remains unconfirmed whether all of its features are fully operational.

The regulator stressed that the breach does not affect the validity of previously issued gambling licenses.