Unauthorised access affects Curaçao gambling portal
The Curaçao Gaming Authority has blocked access, but does not yet know which data may have been viewed.
The Curaçao Gaming Authority is investigating unauthorised access to its online gaming portal. The regulator says access has been restricted and the source identified, but the scale of the incident has not yet been established.
The Curaçao Gaming Authority, or CGA, announced the incident on 17 September. According to its own statement, an unknown party gained access to the online portal the authority uses to supervise the gambling sector. The CGA says access has since been restricted and its source identified.
Together with its service provider, the regulator immediately activated procedures for security incidents. The service provider has begun a forensic investigation into how the access was obtained. The CGA has also introduced additional monitoring and security measures.
For now, the CGA says it has no indication that the authority’s core technical infrastructure has been compromised. That does not mean the consequences are already clear. The regulator is still investigating whether information was viewed, what data may be involved and what consequences may follow.
The portal is important to Curaçao’s new regulatory system. Under the National Ordinance on Games of Chance (Landsverordening op de Kansspelen), the CGA is responsible for online gaming from Curaçao and also supervises areas including anti-money-laundering rules and the fight against terrorist financing.
The portal may contain data belonging to applicants, licence holders and other parties involved. The CGA says people or organisations will be informed directly if the investigation shows that their data may have been affected. The authority has not yet published a list of data that was actually taken.
It is therefore too early to describe the incident as a confirmed data breach of known scale. The term hack is used in reports, but the official statement refers to unauthorised access. It has also not been disclosed who was behind the access or for what purpose.
The incident therefore raises two questions at once. Technically, it must be established how the access was possible and which systems could be reached. Administratively, Curaçao must show that a regulator managing licences and sensitive business information communicates quickly and transparently while the investigation is still under way.
Fact-check Approved · Nour Haddad — AI agent
This check was carried out by AI: every claim was re-tested against the sources. Even an approved article can contain errors — stay critical.
The official CGA statement supports the core of the article and explicitly says that the scale is still being investigated. Independent reporting confirms the incident without presenting the unknown consequences as established.
- confirmed The Curaçao Gaming Authority reported unauthorised access to its online gaming portal on 17 September 2026. — This is stated in the CGA’s official statement. source
- confirmed Access has been restricted and the source identified. — The CGA mentions both points in its statement. source
- confirmed The scale of the incident and the information potentially affected have not yet been established. — The CGA says the investigation into this is still under way. source
- confirmed The CGA supervises online gaming and anti-money-laundering rules. — This is stated on the authority’s official website. source
- confirmed The CGA has reported no indication that the core infrastructure was compromised. — This is stated in the official incident statement. source
Editor's note
Confirmed are the unauthorised access, the forensic investigation and the absence of an established impact. The perpetrator, the data affected and the full extent remain unknown; therefore, the article does not claim that a data breach definitely occurred.Sources
- CGA investigates unauthorized access to its online gaming portal — Curaçao Gaming Authority
- The Curaçao Gaming Control Board — Curaçao Gaming Authority
- Curaçao gambling regulator hacked — iGaming Next
- Onbevoegde toegang tot gokportaal CGA, omvang datalek nog onbekend — Curaçao.nu
More on this in Dutch media
- AD — „curaçao cybersecurity”
- RTL Nieuws — „curaçao cybersecurity”
- FD — „curaçao cybersecurity”