On October 7, the Curaçao Gaming Authority (CGA) announced that its online gaming portal will be permanently closed following a recent cyberattack, while affirming the validity of all existing licenses. The authority will not be restoring the hacked portal involved in the recent "Casino Secrets" data breach, and is instead transitioning to a new platform for its licensing operations.
This breach compromised sensitive documents and ownership information for multiple gambling entities licensed under Curaçao law. White-hat hacker Lilith Wittmann revealed that substantial access was gained to the authority’s databases and systems during the incident.
In light of this security issue, the CGA is focusing on ensuring uninterrupted regulation as it moves from its current platform. The authority reiterated, "The discontinuation of the portal does not affect the validity of existing licenses, the obligations of licensed operators, or the CGA’s ongoing regulatory and supervisory responsibilities," emphasizing that licensing, compliance, and supervision will continue through alternative means in the interim.
Additionally, the CGA announced plans to launch a new process that will enable operators to verify their licenses despite the current digital seal being unavailable. The authority is also working diligently to address the data breach, including measures for containing the leak while safeguarding its regulatory functions and information. They acknowledged that this transition could pose challenges for operators, and expressed gratitude for their cooperation and understanding.
While the CGA has not specified when the new platform will be operational, it assured that its regulatory duties will persist through other arrangements until then.
