Fake ID breach hit Curaçao’s gaming portal for 9 months
The Curaçao Gaming Authority says a German researcher used a false identity to access its portal from December 2025 to September 2026.
The hit
The Curaçao Gaming Authority is defending its licensing procedures after documents lifted through an unauthorised breach of its online portal fed international media investigations. According to the regulator, a German security researcher accessed the system without authorisation.
Why it matters
The regulator’s message is that leaked snapshots do not equal a broken licensing system, since individual documents do not show the full context of an application. But a breach that remained possible for months raises separate questions about the CGA’s own security, quite apart from what international reports questioned about operators’ ownership structures & sources of capital.
The record
| Statement issued | 22 September 2026 (Curaçao Gaming Authority) |
|---|---|
| Unauthorised access period | December 2025 to September 2026 (CGA) |
| Method alleged | Fake account combining a variation of a real name with a registered Chamber of Commerce company (CGA) |
| Regulatory reform starting point | 2024, when Curaçao overhauled its online gaming sector (CGA) |
What happens next
Watch for the CGA’s formal report of the breach to the relevant authorities & any findings on the scale of data extracted, which the regulator says it will not estimate until investigators confirm it.
Sources: CGA defends Curaçao gaming licensing process after leaked documents draw international scrutiny
Named in this story? Reply to newsdesk@infobets.com & we publish it.
18+. Betting involves risk. If gambling is a problem for you or someone close to you, help is available.
Work with BH Group. Paid ads that get iGaming & crypto brands players & users, in the GEOs you choose. Get a plan
Discussion
Ask a question, add useful context or share a source. Keep it relevant & respectful.
Add a comment
Comments are reviewed before publication.