TLDR Malta’s gambling regulator confirmed its systems were accessed without permission earlier this year. A German security researcher claimed responsibility and said files were shared with journalists. It is still unclear if personal data, financial records, or internal messages were taken. Regulatory files can include ownership details, compliance checks, and source-of-funds records. The breach raises new questions about how easily licence numbers can be faked online.
Malta’s gambling regulator has confirmed that its systems were accessed without authorisation earlier this year. What exactly was taken has not been made clear.
A German security researcher later said he was responsible. He claimed files taken from the regulator were shared with journalists.
Since then, public details have stayed limited. There is no confirmation of whether personal data, financial records, or internal messages were part of the breach.
It is also unknown how long the intrusion went undetected before it was found.
Malta is one of the top licensing centers for online gambling companies serving European customers. Its records help track ownership, compliance, and whether a company is fit to hold a licence.
What Regulatory Files Can Contain
Licence databases often hold more than a company name and status. They can include ownership structures, compliance findings, and source-of-funds checks.
Correspondence between operators and the regulator may also be part of the record. This kind of material can show how a company moved through licensing over time.
Operators face a limit here. Much of the information they submitted may be years old, and they have no way to confirm who saw it during the breach.
For now, most companies know only what has been publicly shared. That is not much.
The breach also points to an older problem. Licence numbers are often copied onto fake gambling websites to make them look