Global iGaming Focus from Curaçao Data Breach and Evolution's Brazil Exit to Ohio Prediction Market Restrictions

Three developments reported between October 19 and 23, 2026, reveal a growing challenge for the international gambling industry, namely regulatory decisions are increasingly affecting the technology, infrastructure and financial operations behind online casinos.

In Curaçao, the gambling regulator has disclosed a prolonged cybersecurity breach involving its licensing platform. In Brazil, casino technology supplier Evolution has confirmed the temporary closure of its local studio following changes to the country's gambling framework. Meanwhile, Ohio regulators have acknowledged the first confirmed compliance response to enforcement notices targeting sports prediction markets.

The cases involve different markets and regulatory questions, but together they illustrate how compliance is becoming a more significant operational factor for gambling companies heading into 2027.

Curaçao Gambling Regulator Abandons Licensing Portal After Nine-Month Breach

The Curaçao Gaming Authority (CGA) confirmed on October 19 that unauthorized access to its gambling licensing infrastructure occurred between December 2025 and September 2026.

According to the regulator's official statement, the incident affected an externally managed licensing portal and its database. Confidential information belonging to gambling license holders was accessed and subsequently published.

The duration of the incident raises serious questions about the monitoring and security of regulatory technology platforms, particularly those operated by external service providers.

The CGA has filed complaints with authorities in Curaçao, Germany and the Netherlands. It has also commissioned an independent technical investigation, engaged specialists to remove exposed information from the internet and indicated that civil legal action is under consideration.

Most significantly, the regulator has permanently abandoned the compromised licensing platform.

A temporary replacement portal was scheduled for October 19, although the complete operational status of that replacement has not been independently established.

The authority has emphasized that existing gambling licenses remain valid and operators must continue meeting their regulatory obligations.

Why the Breach Matters Beyond Curaçao

Curaçao has been working to strengthen its international gambling licensing framework, making the security incident particularly significant.

Licensing platforms may process confidential corporate documents, ownership information and compliance records. Unauthorized access can therefore create risks extending beyond the regulator itself.

The incident also highlights the importance of third-party cybersecurity oversight.

Regulators increasingly depend on digital systems to process applications, monitor licensed businesses and maintain compliance records. When those systems are compromised, the consequences can affect an entire licensing ecosystem.

For 2027, the central question is whether gambling authorities will introduce stronger cybersecurity requirements for the technology providers supporting their regulatory infrastructure.

The CGA's independent investigation remains ongoing, and its final findings will be important in establishing the technical causes and full consequences of the breach.

Evolution Temporarily Closes Brazil Casino Studio Despite Revenue Growth

Casino technology supplier Evolution reported third-quarter revenue of €526.1 million on October 23, representing year-over-year growth of 3.7%.

Adjusted earnings before interest, taxes, depreciation and amortization (EBITDA) reached €345.9 million, corresponding to a margin of 65.8%.

The financial results demonstrate continued profitability, but the company's operational update revealed a more complicated picture.

Evolution confirmed that its Brazilian casino studio had temporarily closed following the reversal of the country's regulated gambling framework.

Chief Executive Officer Martin Carlesund indicated that the final regulatory outcome remains uncertain.

The closure illustrates how changes in gambling legislation can affect more than online casino operators. Suppliers operating live dealer studios, technology facilities and other local infrastructure also face consequences when regulatory conditions change.

Growth Continues Across Other Regions

Evolution's regional performance remained positive in several markets.

The company's results also showed growth across its live casino and random-number-generator gaming businesses.

Evolution continues to develop new products, including plans for a North American release of Ice Fishing and additional games through its Hasbro partnership.

The contrast between revenue growth and the Brazilian studio closure demonstrates the uneven conditions facing international casino suppliers.

A company can report strong financial results while simultaneously withdrawing or suspending operations in an individual jurisdiction.

For 2027, suppliers may increasingly evaluate markets according to regulatory stability, operational costs and the risk of sudden legislative changes.

However, the temporary closure should not be interpreted as a permanent withdrawal from Brazil. Evolution has not established that the studio will remain closed indefinitely.

Ohio Confirms Plus500US Compliance With Prediction Market Restrictions

A separate development in the United States illustrates how gambling enforcement is affecting financial technology platforms.

On October 22, the Ohio Casino Control Commission confirmed that Plus500US was the first company among ten recipients whose compliance with recent cease-and-desist notices had been acknowledged.

The notices targeted companies facilitating sports-related prediction market contracts for customers located in Ohio.

Plus500US submitted written confirmation that it does not accept or facilitate these contracts for customers physically present in the state.

According to correspondence from the company's chief legal officer, Amy Meyer, geographic restrictions had already been implemented before Ohio issued its enforcement notice.

The company's response did not admit a violation of Ohio gambling law or concede that the state has jurisdiction over its federally regulated activities.

Ohio's regulator continued discussions with the remaining recipients. The absence of confirmed compliance from those companies does not establish that each was violating state law.

Geolocation Becomes a Regulatory Tool

The Plus500US development highlights a practical distinction between prediction market businesses challenging state authority and companies demonstrating compliance through geographic restrictions.

Sports event contracts remain at the center of a disagreement between state gambling regulators and businesses operating within federally regulated derivatives markets.

The Commodity Futures Trading Commission oversees derivatives markets at the federal level, while state regulators argue that certain sports-related products fall within their gambling enforcement authority.

Geolocation technology offers one way for platforms to restrict access without necessarily accepting the state's legal interpretation.

This approach could become increasingly important as prediction market operators expand their mobile services across jurisdictions with different rules.

The broader legal dispute remains unresolved.

What These Developments Tell Us About iGaming in 2027

The three stories point toward a common trend, namely gambling regulation is moving beyond licensing decisions and into the daily technical operations of gambling businesses.

Curaçao shows the importance of securing the systems regulators rely on. Brazil illustrates how policy changes can interrupt investments in casino production infrastructure. Ohio shows how companies may use geographic access controls to respond to regulatory enforcement while preserving their legal positions.

Together, these developments suggest three priorities for 2027.

First, cybersecurity is becoming a regulatory credibility issue. Authorities responsible for protecting gambling markets must also demonstrate that their own digital infrastructure can safeguard confidential information.

Second, regulatory stability will influence technology investment. Suppliers may place greater weight on the predictability of local rules before committing capital to studios, platforms and operational facilities.

Third, location-based compliance could become more important. As gambling products increasingly overlap with financial technology, operators may need to manage access based on both the customer's location and the product's legal classification.

These are emerging implications, not guaranteed outcomes.

The industry is unlikely to move toward a single international regulatory model. Instead, operators and suppliers will continue adapting to different national and regional requirements.

The events of October 2026 illustrate why that adaptability is becoming essential. For international iGaming businesses, obtaining a license is only one part of operating successfully. Protecting data, maintaining regulatory compliance and responding to market changes may prove equally important in 2027.

Sources Referred

1. Curaçao Gaming Authority. (2026, October 19). Data breach at CGA: From investigation to action [Official regulatory statement]. Read official statement (PDF).

2. Evolution AB. (2026, October 23). Evolution: Interim report January-September 2026 [Financial disclosure]. Read financial results.

3. Sports Betting Dime. (2026, October 22). Plus500US only prediction market operator in adherence with Ohio C&D. Read regulatory reporting.

4. Plus500US. (2026, October 13). Response to Ohio cease-and-desist notice [Regulatory correspondence]. Read company response (PDF).