The Curaçao Gaming Authority (CGA), the regulatory body for the gambling sector, is set to unveil a new licensing portal following a data breach that exposed sensitive information about its license holders. This breach, which occurred last month, was publicly announced on September 17. An investigation revealed that private licensing information was accessed from Germany.
In response to this security incident, the CGA has decided to discontinue its current portal and halt the regulatory services provided by the previous vendor. A temporary portal is expected to be operational by October 19, pending the completion of all necessary testing to ensure functionality for licensing and supervision activities.
The CGA identified several components that require further enhancement and security evaluations before the temporary system goes live. These include the internal operational systems, the digital seal, and the license registry, which will undergo external security assessments. Meanwhile, the customer portal is receiving technical updates in preparation for the upcoming security testing.
The CGA emphasized that deactivating the previous portal does not invalidate existing licenses; licensed companies must continue to fulfill their regulatory responsibilities. To combat the illicit use of stolen data, the CGA has alerted relevant authorities and filed formal complaints with officials in Curaçao, Germany, and the Netherlands. Additionally, the agency has employed specialists to eliminate any unauthorized content from the Internet.
An independent forensic investigation is currently underway to assess the extent of the breach and explore potential remedial actions. The CGA is also contemplating legal steps in light of the incident, which coincides with efforts to revamp the online gambling licensing and supervision framework in Curaçao.
