Grey-Hat Hacker Exposes Curaçao Gaming Authority's Secrets

Lilith Wittmann, a Berlin, Germany-based grey-hat hacker, breached the Curaçao Gaming Authority and accessed sensitive business information. Wittmann claims she breached the systems in December 2025 and has been collecting information ever since, including details about owners, finances, and processes.

Wittmann has released information about entities associated with prominent brands in the iGaming industry, including Platinum Casino. She detailed how she spent nine months watching the internal processes at the Curaçao Gaming Authority, stating, "For nine months, I watched the Curaçao gambling authority at work in real time—without the staff knowing. I could see who owned illegal online casinos, who was financing them, and what the authority knew about their operations."

Wittmann argued that it took her less than eight hours to exploit an easily identifiable security vulnerability and gain full access to the regulator’s servers. She noted, "This also gave me access to the web portal used for licence management. From then on, I could read every application and every document submitted to the authority." This is not the first time Wittmann has breached a gambling regulator, previously going after the Malta Gaming Authority (MGA), which has not hesitated to take the grey hat hacker to court.