CGA Takes Online Licensing Portal Offline Amid Security Investigation

The Curaçao Gaming Authority has taken its online gaming portal offline, temporarily removing access to the system used by iGaming operators and suppliers for licensing and ongoing regulatory management.

The CGA posted a notice on its website confirming that the portal is unavailable and said further details would be provided shortly. The regulator did not give a reason for the shutdown.

The timing follows an ongoing forensic investigation into unauthorised access to the same portal. However, the CGA has not stated that the current outage was caused by the security incident.

Portal Handles Applications and Licence Management

The CGA portal is a central part of Curaçao's online gambling regulatory infrastructure under the National Ordinance on Games of Chance.

Operators use it to submit applications for online gaming licences, while suppliers can apply for authorisation to provide gambling-related products and services.

For existing licensees, the system also supports ongoing licence management, regulatory filings, support requests and changes to approved information. Domain management is among the functions available through the platform.

The CGA has not said how long the portal will remain unavailable or whether alternative procedures will be provided to companies that need to make submissions while it is offline.

Shutdown Follows Unauthorised Access Investigation

The regulator disclosed earlier in September that it had identified unauthorised access to the portal.

The CGA later said an account created using a false identity had been active in the customer-facing section of the system from December 2025 until September 2026.

After detecting the activity, the regulator said the access was contained and the affected account secured. A forensic investigation remains underway with support from independent cybersecurity specialists and relevant authorities.

The CGA has also filed reports with domestic and international authorities concerning information it says was unlawfully obtained from the portal.

The regulator previously withdrew from SBC Summit Lisbon 2026 so that staff and resources could remain focused on the investigation and related operational work.

Lilith Wittmann Mocks Latest Portal Outage

Berlin-based cybersecurity researcher Lilith Wittmann responded to the portal going offline with another sarcastic post on X.

Wittmann asked how she was now supposed to register a new casino and add domains after, in her words, her government had again blocked all of her existing ones.

The comment follows an increasingly public dispute between Wittmann and the CGA over the security incident.

The regulator has said it is considering legal action against the German researcher and is monitoring the publication of information obtained from its systems. Wittmann has previously mocked the CGA's decision to cancel its SBC Summit appearance and jokingly offered to help licensees at the regulator's stand.

For now, the CGA has provided no technical explanation for the latest shutdown. The authority says additional information about the portal will be released shortly.