Curaçao Gaming Regulator cuts ties with firm run by former MGA Chief following data breach

The Curaçao Gaming Authority (CGA) has confirmed that its existing online gaming portal will not return to service, bringing the associated service arrangements to an end following an unauthorised access incident and data leak.

In an official announcement, the regulator said it was transitioning to a new platform while maintaining its licensing, compliance and supervisory functions through alternative arrangements. The decision effectively ends the authority’s relationship with Random Consulting Ltd, the company run by former Malta Gaming Authority (MGA) chief Mario Galea.

The portal had been operational since September 2023 and formed part of Curaçao’s efforts to reform its online gambling regulatory framework.

The closure follows a security incident involving researcher Lilith Wittmann, who gained unauthorised access to the platform. More than 40,000 documents obtained from the portal were subsequently made public.

The CGA confirmed that its response to the incident includes measures to contain the data leak and protect its regulatory functions and information assets. The regulator also stated that the existing portal would not be restored.

The regulator has confirmed that existing licences remain valid and that operators’ obligations are unchanged. Licensing, compliance and supervisory activities are continuing through alternative arrangements while an interim solution is implemented.

The CGA also warned that the availability of its existing digital licensing seal would be affected by the transition. It said an alternative mechanism would be introduced to allow operators to demonstrate that their domains are licensed by the authority.

In 2024, Curaçao’s opposition MP Luigi Faneyte submitted a report to Curaçao’s attorney general alleging fraud and embezzlement involving Mr Galea and other individuals.

Mr Galea rejected the allegations as baseless and unfounded, while Curaçao’s gaming authorities disputed assertions made in the report. Other individuals named also denied the allegations.

Curaçao Finance Minister Charles Cooper subsequently announced an investigation into Random Consulting and claimed that the company received an annual payment of €4 million. Random Consulting disputed the figure, describing the minister’s calculations as inaccurate and stating that its income was substantially lower.