Curaçao — Cyber Threat Profile

Curaçao, an autonomous country within the Kingdom of the Netherlands, has run its own national CERT since March 2012 — CARICERT, sponsored by the Bureau Telecommunication and Post. Core institutions have been hit repeatedly: a September 2021 cyberattack struck a server of the Central Bank of Curaçao and Sint Maarten, and a July 2025 ransomware attack encrypted files at the tax office, closing counters and the call center for days — part of a Dutch Caribbean wave that also disrupted the six-island Joint Court of Justice — with Dutch cyber specialists deployed to assist the response. Exposure concentrates in the online-gambling licensing sector, overhauled by the LOK ordinance (in force December 24, 2024) under the renamed Curaçao Gaming Authority. Data protection rests on the National Ordinance Personal Data Protection, which contains no specific breach-notification clauses.

Read the full analysis on IntelFusions