Fake ID breach hit Curaçao’s gaming portal for 9 months

The Curaçao Gaming Authority says a German researcher used a false identity to access its portal from December 2025 to September 2026.

The hit

The Curaçao Gaming Authority is defending its licensing procedures after documents lifted through an unauthorised breach of its online portal fed international media investigations. According to the regulator, a German security researcher accessed the system without authorisation.

Why it matters

The regulator’s message is that leaked snapshots do not equal a broken licensing system, since individual documents do not show the full context of an application. But a breach that remained possible for months raises separate questions about the CGA’s own security, quite apart from what international reports questioned about operators’ ownership structures & sources of capital.

The record

Statement issued	22 September 2026 (Curaçao Gaming Authority)
Unauthorised access period	December 2025 to September 2026 (CGA)
Method alleged	Fake account combining a variation of a real name with a registered Chamber of Commerce company (CGA)
Regulatory reform starting point	2024, when Curaçao overhauled its online gaming sector (CGA)

What happens next

Watch for the CGA’s formal report of the breach to the relevant authorities & any findings on the scale of data extracted, which the regulator says it will not estimate until investigators confirm it.

Sources: CGA defends Curaçao gaming licensing process after leaked documents draw international scrutiny

Named in this story? Reply to newsdesk@infobets.com & we publish it.

18+. Betting involves risk. If gambling is a problem for you or someone close to you, help is available.