Curaçao Gaming Authority Pulls Out of SBC Summit Lisbon Amid Data Leak Investigation

The Curaçao Gaming Authority has withdrawn from SBC Summit Lisbon 2026 as it focuses resources on an ongoing investigation into unauthorised access to its systems.

In a statement dated September 25, the CGA said it would not participate in the industry event because its attention and resources are being directed toward priority operational matters, including a forensic investigation into the security incident. 

CGA Says Unauthorised Access Has Been Contained

The regulator said it has implemented containment, security and investigative measures since detecting the incident.

According to the CGA, the unauthorised access has been contained and the affected account secured. The authority is working with relevant authorities and independent cybersecurity specialists to assess how the incident occurred and determine its potential impact. 

The CGA did not provide details in the statement on the volume of information accessed, the specific systems affected or the identities of parties whose data may have been exposed.

Regulator Considers Legal Action Against Security Researcher

The CGA said it has filed reports with domestic and international authorities concerning information it says was unlawfully obtained from its online portal.

It is also evaluating legal action against a German security researcher and monitoring the publication of leaked information online with the aim of having the material removed. 

The statement does not identify the researcher or provide further detail on the legal basis of any potential action.

The distinction is important because the regulator's characterisation of how the information was obtained forms part of an ongoing investigation. The CGA said aspects of the case remain subject to forensic and regulatory review.

Regulatory Operations Continue During Investigation

Despite cancelling its SBC Summit Lisbon appearance, the CGA said its regulatory and supervisory work remains fully operational and has not been interrupted by the incident. 

The authority said concentrating resources on the investigation and related activities was the most responsible course of action at this stage.

SBC Summit Lisbon is one of the largest annual gatherings for the international betting and gaming sector, bringing together operators, suppliers, regulators and other industry stakeholders.

The CGA said it intends to resume engagement with industry partners at future events and will publish further information on the security incident when appropriate.