The Curaçao Gaming Authority (CGA) has confirmed that hackers gained unauthorized access to its online gaming portal. The incident is now contained while the regulator investigates the scope and potential impact.
The CGA said it discovered the breach and immediately activated its incident-response procedures together with its service provider. A forensic investigation is underway to determine what information, if any, the attackers accessed.
CGA Contains Unauthorized Access
The regulator said the source of the intrusion has been identified and the unauthorized access has been contained.
The CGA also confirmed that its core technical infrastructure has not been compromised. However, the regulator said it remains too early to determine whether sensitive information was accessed. Furthermore, it is not clear what consequences the incident could create.
Additional monitoring and security measures are now in place as a precaution.
Forensic Investigation Continues
The CGA and its service provider are reviewing the affected systems and investigating the circumstances surrounding the unauthorized access.
The regulator has not yet confirmed whether personal or regulatory information was accessed. It said the assessment will determine the scope of the incident and whether any individuals or organisations face consequences.
The investigation remains ongoing. The CGA said it will notify individuals, licence applicants, licensees, and other stakeholders if investigators determine that their information was affected.
Regulator Promises Further Updates
The incident places additional attention on cybersecurity within online gaming regulation. In this sector, regulators manage information relating to operators, licence applications and compliance activities.
For Curaçao licensees and applicants, the investigation will determine whether the breach affected any regulatory or business information. This information may be held through the portal.
The CGA said it is treating the incident seriously and continues to work with its service provider and relevant authorities.
The regulator has also committed to providing further updates. This will happen as investigators establish more facts about the breach and its potential consequences.
