Curaçao regulator hack threatens to expose crypto casino data

Crypto casinos based in Curaçao could see their confidential information made public after the island's gambling authority disclosed a cyberattack last week.

Thanks to its permissive regulatory framework under the Curaçao Gaming Authority (CGA), the jurisdiction became a hub for online casino operators.

On September 17, the CGA announced that attackers had broken into its online gaming portal. However, it did not disclose how much data was compromised.

The authority stated, “While the unauthorized access has been contained, the investigation remains ongoing and has not yet established the full scope of the incident.”

“The CGA is currently assessing whether and which information was accessed, as well as the potential consequences arising from such access,” the regulator added.

"CGA investigates unauthorized access to its online gaming portal"

Well that's not good…

Are we about to see the KYC of UBOs leaked for various CGA licensed casinos?

— SmokeyLisa (@smokeylisa) September 21, 2026

The CGA said it would directly contact anyone affected — including individuals, applicants, licensees or other stakeholders — if the breach does turn out to impact them.

Consequently, users on X have suggested that personal data of crypto casino operators, such as photo identification and other private details, may have been taken and could be leaked or used for blackmail.

Curaçao regulators didn’t really care to check casinos

The Curaçao gambling watchdog is recognized for performing only superficial checks on license applicants.

Cryptocurrency casinos including Rollbit, 1xBet and Stake were all registered there. Rollbit's Curaçao licence, though, reportedly showed as revoked as of this month.

The island also moved this year to improve its tarnished gambling image by passing new legislation requiring clear anti-money laundering and identity verification measures.