The Curaçao Gaming Authority (CGA) said in a press release dated October 19 that it is launching a temporary licensing portal to replace the one that was shut down after a data leak. The old portal and the external company that ran it will no longer be used, and the CGA plans to build and operate the new system itself.
The CGA discovered the leak on September 17. According to the regulator, a security researcher from Germany gained unauthorized access to the portal and its database, then published personal and confidential data of license holders. The CGA says access lasted from December 2025 to September 2026. The portal and database were run by an external company, whose name has not been disclosed in the materials available.
The temporary portal is expected to handle license applications and supervisory procedures. The license registry and the digital seal, meaning the seal on an operator's website that verifies a CGA license, are also due to go live with it. According to the regulator, these components undergo independent security reviews before launch.
According to the CGA, closing the portal does not cancel existing licenses, and their holders remain obliged to comply with the regulator's requirements.
It remains unclear exactly which data was leaked and which companies were affected. It is also unclear how the regulator will protect those whose documents have already been published, and when the permanent system will be operational. Sources differ on the date: some name October 19 as the launch day, while others say Tuesday, October 20. We have found no confirmation that the portal is already open.
Affiliate programs and operators licensed in Curaçao should check whether their digital seal is visible and whether they appear in the updated registry. If you have an application or renewal coming up, it is advisable to wait for official CGA instructions on working through the temporary portal.
