Curaçao Investigates Possible Data Breach on Gambling Licensing Portal

^{Unauthorized access / © Shutterstock}

Curaçao’s gambling regulator, the Curaçao Gaming Authority (CGA), has detected unauthorized access to its online portal. The regulator disclosed the breach in a statement issued on September 17.

Once the issue was discovered, the unauthorized access was blocked. The CGA said it had identified the source of the breach but did not disclose who was responsible or how access was obtained.

Companies use the portal to apply for Curaçao gaming licenses. It is used by online casino and sports betting operators, as well as gaming service and software providers.

Applicants upload documents and information about their companies, owners, executives and other related parties through the system. Existing licensees also use the portal to submit reports to the regulator, including notifications about operational changes and incidents.

The CGA is investigating whether unauthorized parties accessed or obtained any information and what data may have been exposed. The scale of the incident has not yet been established.

According to the regulator, there is no evidence that its core technical infrastructure was compromised. The CGA has increased monitoring and strengthened security measures while the investigation continues.

If the investigation finds that information relating to specific individuals, applicants, licensees or other market participants was affected, the individuals or entities concerned will be notified directly. The CGA said it would provide further updates as more information becomes available.