Curacao Regulator Shuts Down Licensing Portal After Hack

The Curacao Gaming Authority (CGA) has confirmed that its online licensing portal, in service since September 2023, will not return after an extraordinary data breach, according to a notice dated October 7 and reported by iGaming Times.
The regulator said discontinuing the portal "also entails the conclusion of the associated service arrangements supporting the platform," though it did not name the service provider or explain why the platform will not return.
The portal had already gone offline by October 2, when the CGA told applicants to stop emailing portal submissions and postponed filing deadlines until further notice.
Casino Games Hub
Existing Licences Unaffected, For Now
The CGA said existing licences remain valid and operators' obligations are unchanged, with licensing, compliance and supervision continuing "through alternative arrangements" while an interim solution is implemented.
Further detail was originally targeted for no later than October 9, but as of this report no update had been published.
The regulator also flagged that its current digital seal, the mechanism operators use to prove a domain is licensed by the CGA, "will be affected," and said it would shortly introduce another way for operators to demonstrate valid licensing.
A Breach That Shadowed Curacao All Year
The portal's collapse follows a data leak that rocked the offshore gambling industry in September, after a hacker identified as Lilith Wittmann published more than 40,000 documents obtained through unauthorised access gained a year earlier.
The CGA's October notice says its response to that incident, "including containment of the data leak," is continuing.
Curacao's licensing system underpins thousands of online casino and betting operators globally, so a prolonged gap in its application infrastructure could slow new licensing activity even as the regulator insists day-to-day supervision is unaffected.
Players researching Curacao-licensed operators can check GDC's responsible gambling resources for guidance on licensing checks, with further regulatory news to follow as the CGA's replacement plan takes shape.
What Operators Still Don't Know
The CGA's notice leaves several practical questions open: which company or system will replace the breached portal, how long new licence applications will be delayed, and whether the "alternative arrangements" covering compliance and supervision involve manual processes or a genuinely new digital system.
For operators mid-application when the portal went offline on October 2, that uncertainty is the most immediate business impact, even though the regulator has been clear that already-granted licences are not in question.



