Curaçao Gaming Authority to Replace Hacked Online Portal

The Curaçao Gaming Authority (CGA) will discontinue its existing online gaming portal and move its licensing activities to a new platform following last month’s “Casino Secrets” data breach. In a news release dated 7 October, the regulator confirmed that existing licences will remain valid despite the portal’s closure.

The decision follows a cyber incident that exposed sensitive documents and ownership information relating to several gambling companies licensed under Curaçao’s gaming framework. White-hat hacker Lilith Wittmann previously warned that the authority’s systems had been compromised, giving the attackers extensive access to its database and infrastructure.

Rather than restoring the affected portal, the CGA has opted to transition to a replacement platform while maintaining its regulatory operations. The authority said the move is intended to ensure its functions continue throughout the changeover.

The CGA stated:

“The discontinuation of the portal does not affect the validity of existing licenses, the obligations of licensed operators or the CGA’s ongoing regulatory and supervisory responsibilities.”

According to the regulator, licensing, compliance and supervisory work will proceed through alternative arrangements while an interim solution is put in place.

The closure will also affect the availability of the CGA’s current digital seal. To address this, the authority plans to introduce another method allowing operators to verify that their domains hold a CGA licence.

The regulator said it continues to respond to the unauthorized access incident, including efforts to contain the data leak. It added that protecting its regulatory functions and information assets remains a priority.

The CGA added:

“Given that the availability of the current digital seal will be affected, the CGA will shortly introduce an alternative mechanism through which operators can demonstrate that a domain is licensed by the CGA. The CGA also continues its efforts in response to the unauthorized access incident, including containment of the data leak and remains focused on protecting the integrity of its regulatory functions and information assets. We recognize that this transition may create challenges for operators and appreciate their cooperation and understanding during this period.”

No launch date has been announced for the replacement platform. Until it becomes available, the CGA says it will continue carrying out its regulatory responsibilities through alternative arrangements, with existing licences remaining in force.