A major data leak has revealed the inner workings of several online casinos licensed through Curaçao, a Caribbean island known for its offshore gambling industry. The breach, attributed to a hacker named Lilith Wittmann based in Berlin, involved unauthorized access to the Curaçao Gaming Authority (CGA) database. This database contained tens of thousands of confidential files, shedding light on the operations of major online gambling companies, including Stake.com, a cryptocurrency-focused casino and sponsor of Everton Football Club, and the Santeda network, which has been previously investigated by The Guardian and Investigate Europe. The leaked documents include details about the owners of offshore casinos and the sources of their wealth. Santeda International, a global casino network, was found to have targeted vulnerable gamblers in the UK, despite not holding a licence from the UK Gambling Commission. A digital trail linked Santeda to Upgaming, a company owned by Georgian businessmen. While Upgaming’s lawyers denied any connection to Santeda, the leak raised questions about this claim. A document from 2025 named Torniki Kapanadze as Santeda’s finance chief, while a LinkedIn profile shows a Tornike Kapanadze working for Upgaming. The slight difference in spelling was pointed out by Upgaming’s lawyers, who suggested it could be a common name in Georgia. The leak also revealed that Santeda extended six loans totaling €15,590,000 to Buda Capital, a Luxembourg-based company with ties to Upgaming. Upgaming did not explain the nature of the loan. Additionally, the documents included information about Oddsbet, a betting company focused on VIP gamblers, which was owned by Robert Bostock until 2025. The data suggested that Bostock’s funds came from long-term cryptocurrency investments and a £100,000 loan from a UK-based individual. Bostock’s lawyers stated that the loan was never used and that the business served customers outside the UK. BC.Game, a sponsor of Leicester City Football Club, also appears in the leak and has been accused of targeting UK customers despite surrendering its licence. This would be a violation of the Gambling Act 2005. Stake.com, which withdrew from the UK in 2025, had its Curaçao-registered company, Medium Rare NV, owned by Serbian national Mladen Vučković, who declared assets worth over $1 billion. Regulators questioned whether Vučković actually owned the business, given the presence of millions of dollars linked to Stake’s founders, Ed Craven and Bijan Tehrani, who were not listed on the licence application. The UK Gambling Commission said it could not comment on the leak but reaffirmed its commitment to tackling illegal gambling. The CGA stated it could not answer questions about an ongoing forensic investigation but emphasized its dedication to transparency. The Guardian has reached out to BC.Game and Stake.com for their responses.