Curaçao gaming authority experienced unauthorized access to their portal

[Silverstonez]

I’m curious about this too because I’ve never heard of this before but it seems like they were interested in stealing some high profile people’s data from the portal and then used those information to scam people. According to my perspective, they want used that information to open social media accounts, impersonate high profile individuals and potentially scam other people using their identity.

[Floxynice]

I stumbled upon this news today, which was made about 5 days ago, but I have a question regarding this. Curaçao is a gaming licensing authority. What are the hackers targeting to get from such place, licensed casino's details, or the are more data saved in their database other than what the casinos give to them as part of regulatory requirements as I believe money can't be kept in their online portal.

https://gamingcontrol.spin-cdn.com/media/general_publications/20260917_press_release_cga_17092026.pdf

Do you think that the hacker mistakenly hacked into Curaçao portal? I doubt it was a mistake. Whoever is behind this has a reason why he accessed the portal. There are information there that he can act on, it might not be about money.  Whatever his reasons are, It will definitely not be for a good reason, probably another selfish reason to target an entity and steal from them. Do not underestimate these hackers.

[Joy- maker]

Scammers will never cease to amaze me, so they are now hacking into platforms that issue license to casinos and gambling platforms just to steal high profile datas and then use them to scam people. Because apart from this thing I just said I can't think of anything else, they would do with those information they intend to steal from Curacao. I hope they didn't successfully steal any high profile person's information or sensitive date that could be used to target more victims.

[Don Pedro Dinero]

Scammers will never cease to amaze me, so they are now hacking into platforms that issue license to casinos and gambling platforms just to steal high profile datas and then use them to scam people. Because apart from this thing I just said I can't think of anything else, they would do with those information they intend to steal from Curacao.

It’s only logical. We’re spending more and more of our lives online, so criminals are increasingly focusing their activities online too. We’ve recently seen cases of hacking that have resulted in large sums of money being stolen online. In this instance, it’s ‘just’ sensitive information, but it’s surely paving the way for a huge profit later on.

I hope they didn't successfully steal any high profile person's information or sensitive date that could be used to target more victims.

That’s exactly what they were after, and I’m sure they’ve managed to get their hands on some very juicy information.

[Nwada001]

I’m curious about this too because I’ve never heard of this before but it seems like they were interested in stealing some high profile people’s data from the portal and then used those information to scam people. According to my perspective, they want used that information to open social media accounts, impersonate high profile individuals and potentially scam other people using their identity.

Data is expensive now. Instead of them hacking different casinos to get data of players, they went for the big boss, where they can also get information relating to both the owners of casinos and those who operate them. Since the hack news we have seen, some sort of stories have been talking about how some casino owners' identities have even been exposed, and some of them are also being linked to some shady practices, which won’t look good for their business.

[Zlantann]

Data is expensive now. Instead of them hacking different casinos to get data of players, they went for the big boss, where they can also get information relating to both the owners of casinos and those who operate them. Since the hack news we have seen, some sort of stories have been talking about how some casino owners' identities have even been exposed, and some of them are also being linked to some shady practices, which won’t look good for their business.

It is believed that casino businesses create easy avenues to launder funds. It is also assumed that these gambling busineese can be used to inflate legitimate gaming revenues with fraudulent funds. If this is the case in some casinos, exposing the identities of the owners could link them to some shady financial transactions.

I checked the latest update on this unauthorized access and I discovered this:

Lilith Wittman, a German hacker who previously accessed the database of the Malta Gaming Authority, has since claimed responsibility for the security breach.

Wittman posted on LinkedIn that she has spent the last nine months accessing data from the CGA.

The CGA confirmed that access was obtained in December 2025 through the use of a false identity and continued until the breach was identified earlier this month.

https://igamingexpert.com/news/regulation/curacao-gaming-authority-unauthorised-access/
https://news.bitcoin.com/igaming/casino-secrets-hacker-beats-malta-regulator-leak-site-down/

[New Judgement]

I’m curious about this too because I’ve never heard of this before but it seems like they were interested in stealing some high profile people’s data from the portal and then used those information to scam people. According to my perspective, they want used that information to open social media accounts, impersonate high profile individuals and potentially scam other people using their identity.

Hackers don’t just embark on a hit randomly without having a specific target on why they are carrying out that particular operation. Only the hackers know exactly what they were looking for that took them to CGA portal, whatever we say here are just guesses. If hackers need to impersonate someone, they don’t have to go through such stress to get the information of the person or entity they want to impersonate. Besides whatever documents or information that entities or individuals submitted are public information that can easily be gotten by browsing some of them online.

If that was their aim, they will target the person they want to impersonate directly and get whatever information they want from them. It is true that the hackers went for information, but I don’t think it’s for implementation purposes, it’s either they went for something that will aid them carry out a bigger hit, or they accessed the portal to delete some vital informations.

[Hispo]

Scammers will never cease to amaze me, so they are now hacking into platforms that issue license to casinos and gambling platforms just to steal high profile datas and then use them to scam people. Because apart from this thing I just said I can't think of anything else, they would do with those information they intend to steal from Curacao. I hope they didn't successfully steal any high profile person's information or sensitive date that could be used to target more victims.

It is obvious to me that whoever did this was not just a single person or a common group of scammers, this is quite high profile and not somethign done by amateurs.
Lately, we have seen how groups of north korean hackers have been targetting gambling platforms, casinos and bookies on the internet, so they can steal as much crypto as possible from them.
This theft of information could come very handy to those same north korean hackers as this kind of information could help them to continue to steal crypto from more casinos in the future.

Unfortunately, this is information which will likely end up in the wrong hands and used to steal from innocent casino operators in the future, I have no doubt about it.

[free-bit.co.in]

I'd also add that hackers don't always aim to blackmail and sell confidential data. Sometimes, these are so-called "white hat" hackers whose goal is to expose vulnerabilities in website security—in this case, the website of regulators. This can reveal that confidential data is being improperly stored.

Dude, are you serious? Lol!
Considering this White Hat is sheer naivety!
CGA has already issued an official press release stating that unauthorized access or breach has occurred on their portal. And they have deployed CID and investigation team.

If it were the work of white hats then they would have sent email to CGA privately, adhering to disclosure protocol. They never entered portal directly by breaking down front door to stage a breach.

This is 100% scheme to sell UBO data at high price on dark web, or a case of ransomware blackmail. There is no point in being so straightforward!

[Moreno233]

Do you think that the hacker mistakenly hacked into Curaçao portal? I doubt it was a mistake. Whoever is behind this has a reason why he accessed the portal. There are information there that he can act on, it might not be about money.  Whatever his reasons are, It will definitely not be for a good reason, probably another selfish reason to target an entity and steal from them. Do not underestimate these hackers.

At the end of the day, it is always about the money. They may not be targeting the authority but the information they obtained from the hack can be used in a lot of ways that will fetch them money. For instance, getting the data of some individuals and companies can surely fetch them money if they sell them to competitors or even used that to mimic them on social media like someone rightly said above. Those are ways hackers earn money from their criminal activities.

[Floxynice]

Do you think that the hacker mistakenly hacked into Curaçao portal? I doubt it was a mistake. Whoever is behind this has a reason why he accessed the portal. There are information there that he can act on, it might not be about money.  Whatever his reasons are, It will definitely not be for a good reason, probably another selfish reason to target an entity and steal from them. Do not underestimate these hackers.

At the end of the day, it is always about the money. They may not be targeting the authority but the information they obtained from the hack can be used in a lot of ways that will fetch them money. For instance, getting the data of some individuals and companies can surely fetch them money if they sell them to competitors or even used that to mimic them on social media like someone rightly said above. Those are ways hackers earn money from their criminal activities.

On a serious note, data breaches, especially the ones containing sensitive data like this particular one, should be taken seriously. We don't need to take it seriously only when funds are directly stolen. I am believing now that with this breach, there will be more cases of identity theft, Impersonation, phishing attacks, blackmails and more.

Curaçao now has a big responsibility, the responsibility of making sure that this does not happen again. A licencing and regulatory system like Curaçao's should be able to protect the people who trust it with their sensitive data. This case should be well investigated and measures taken to prevent reoccurrence.

[Hispo]

I'd also add that hackers don't always aim to blackmail and sell confidential data. Sometimes, these are so-called "white hat" hackers whose goal is to expose vulnerabilities in website security—in this case, the website of regulators. This can reveal that confidential data is being improperly stored.

Dude, are you serious? Lol!
Considering this White Hat is sheer naivety!
CGA has already issued an official press release stating that unauthorized access or breach has occurred on their portal. And they have deployed CID and investigation team.

If it were the work of white hats then they would have sent email to CGA privately, adhering to disclosure protocol. They never entered portal directly by breaking down front door to stage a breach.

This is 100% scheme to sell UBO data at high price on dark web, or a case of ransomware blackmail. There is no point in being so straightforward!

I agree with you... I don't see anything going on in this case having something to do with the typical disclosure behavior of white hat hackers.
That information has a lot of monetary value for scammers and criminals in general on the internet.
If this was the work of white hat hackers, we would already know about it and the Curaçao authorities would have issued some clarification about the situation, reassuring their clients and regulated casinos that their information was safe. This was not the case.

[retreat]

For hackers to attack that CGA portal means that the data must be really important, especially from what I read it contains gambling operator information, like owner data, financial information, and various other data. If hackers sell this important data, then people who get their hands on it could know the company structure, owners, operators, and other data that could be used for business competitor purposes, scams, or even worse, wrench attacks. There are so many worst-case scenarios that could happen from this data leak, and hopefully the parties involved can resolve this issue quickly and hopefully not too much sensitive data has leaked.

[Filicius]

For hackers to attack that CGA portal means that the data must be really important, especially from what I read it contains gambling operator information, like owner data, financial information, and various other data. If hackers sell this important data, then people who get their hands on it could know the company structure, owners, operators, and other data that could be used for business competitor purposes, scams, or even worse, wrench attacks. There are so many worst-case scenarios that could happen from this data leak, and hopefully the parties involved can resolve this issue quickly and hopefully not too much sensitive data has leaked.

Imagine. If a leak of users' personal data is already something very serious, the information about the owners of the platforms can be even worse These are people who make a living from them and who probably have their entire fortune invested in them.

BTW, this issue is also being discussed in this other thread in the Gambling discussion section, but... are they really related?

[The Cryptovator]

I stumbled upon this news today, which was made about 5 days ago, but I have a question regarding this. Curaçao is a gaming licensing authority. What are the hackers targeting to get from such place, licensed casino's details, or the are more data saved in their database other than what the casinos give to them as part of regulatory requirements as I believe money can't be kept in their online portal.

Haven’t you heard about the official hardware wallet website hacking? Basically they hacked for the data, not for the funds, and hacking the official website of the wallet doesn’t mean hackers could gain access to the user's wallet. Same hacking Curaçao also for the data.

Data is a valuable asset; they would sell data or do something else. Even issuing licenses from the platform doesn’t make sense, because when the authority gets back the access, they will check everything, and it’s easy to verify all the changes. So I believe the target is data.

[buwaytress]

^ Yeah, UBOs and such are what are much more sensitive (and valuable). Can be PPEs, can be sanctioned people, can even be known whitelisters but if they all have the same links to brands also allegedly illegally targeting players in jurisdictions like the UK, well. They'll want to pay to keep it secret.

The coverage by Guardian suggests (not all of) the hackers aren't after blackmail money though...

[Chibit01]

Do you think that the hacker mistakenly hacked into Curaçao portal? I doubt it was a mistake. Whoever is behind this has a reason why he accessed the portal. There are information there that he can act on, it might not be about money.  Whatever his reasons are, It will definitely not be for a good reason, probably another selfish reason to target an entity and steal from them. Do not underestimate these hackers.

Hackers don't take actions by mistake. They usually have a target before they start. The girl hacker who is fearless, according to her story, takes responsibility for the action and said she has been in for almost a year, which is not an action taken by someone who is mistaken. Hackers always go for the bigger bag, which among data hacking history this year, what will be uncovered from what the hacker gained access to will be large.

[Yeesha]

Scammers will never cease to amaze me, so they are now hacking into platforms that issue license to casinos and gambling platforms just to steal high profile datas and then use them to scam people. Because apart from this thing I just said I can't think of anything else, they would do with those information they intend to steal from Curacao. I hope they didn't successfully steal any high profile person's information or sensitive date that could be used to target more victims.

Scammers can go to any extent to fulfill their wish, so I was not surprise to see this. If they were able to steal the informations successfully, they will just use them to manipulate others. If they don't have the intention of stealing or doing anything hurtful, they will not interfere in it from the first place. I believe they must have been monitoring their movement for so long now, but they are only waiting for the right to strike. It a good thing that the authority notices that, and it is important to take action immediately before things get out of hand.

[Joy- maker]

Now that scammers are going after platforms that issues licenses to casinos and gambling platforms to steal high profile data, don't we think this is a wake up call for the entire industry to strengthen its cybersecurity before more sensitive information falls into the wrong hands. Because as it stands now, before you can successfully scam someone there are some level of information you need to provide before they can be convinced that you are truly the person they are talking with, that's why we see scammers hacking into these platforms to steal those sensitive informations.