Curaçao Gaming Authority (CGA) said on September 18 that its online portal for gambling operators had been accessed without authorisation.
The breach has been contained and the source of the attack identified, CGA said. The regulator and its service provider began response procedures and a forensic investigation after detecting the incident. The investigation is ongoing, and the full scope remains unclear. CGA is checking which data was accessed and what consequences may follow.
CGA said its core technical infrastructure was not compromised, but that the nature of the information stored means it is too early to assess the impact. Additional monitoring and protection systems have been put in place. If the investigation finds that data belonging to individuals, applicants, licensees or other market participants was affected, they will be notified directly as required by law.
For operators holding Curaçao licences, this is the second major security incident in the region this year. Malta Gaming Authority was hit by a similar attack in March. With CGA licensing hundreds of online casinos, including those operating in CIS markets, the potential exposure of operator and player data could be significant.
