MGA rejects hacker’s allegations after claimed breach of regulator’s systems

The Malta Gaming Authority has dismissed allegations of illegal conduct made by a German security researcher who claims to have hacked one of the regulator’s systems, calling the intrusion unacceptable and the accusations unsubstantiated.

The Malta Gaming Authority said it was aware of public statements made by an individual claiming responsibility for unauthorized access to one of its systems and making a series of allegations and threats in that context. In its statement issued on March 20, the regulator said it condemns any unauthorized access, as well as any extraction, handling or dissemination of data obtained through such activity. The MGA described that conduct as “unacceptable and incompatible” with lawful engagement with public institutions and established governance frameworks.

The confrontation escalated after German security researcher Lilith Wittmann publicly claimed responsibility for the breach and alleged that the authority had enabled organized crime schemes while presenting itself as a legitimate public service. Industry reporting said the post was published on March 20 and later removed, while the MGA responded the same day by rejecting the accusations and defending the integrity of its regulatory role.

The regulator had already disclosed on March 17 that it was investigating a breach within one of its systems and had activated internal response protocols. At that stage, the MGA said early indications suggested the incident had been carried out by someone posing as a security researcher, but it did not specify what data may have been accessed or whether any operator or player information had been compromised. That lack of detail has left the industry watching closely, given Malta’s central role in international iGaming regulation.

For the gambling sector, the case has quickly become more than a cybersecurity story. It combines questions about regulatory resilience, data protection and reputational trust at one of Europe’s best-known gaming authorities. For now, however, the most important verified point is that the MGA has firmly denied the allegations of illegal activity, while no public evidence supporting those claims has yet been presented.