German Court Allows Cybersecurity Researcher to Label Malta Gaming Authority as Organized Crime Enabler
Xander Hartmann · Sep 27, 2026

German Court Allows Cybersecurity Researcher to Label Malta Gaming Authority as Organized Crime Enabler

Lilith Wittmann secured an interim court ruling from Landgericht Berlin II in case 7 O 254/26 eV that permits her to describe the Malta Gaming Authority as an organized crime enablement scheme while continuing to reference documents obtained from an earlier breach of the regulator's systems, and this decision arrived after separate actions involving the Curaçao Gaming Authority licensing portal that released tens of thousands of confidential files detailing ownership structures for numerous offshore online casinos including connections to operators such as Stake.
Background of the Legal Proceedings
The Berlin-based researcher and hacker had faced prior restrictions on public statements about the Malta Gaming Authority following disputes over the use of breached materials, yet the recent interim injunction proceedings shifted that landscape by granting her temporary freedom to employ specific language and continue referencing the documents in question, and observers note that such rulings often hinge on balancing freedom of expression against regulatory claims of confidentiality and reputational harm.
Documents from the Malta Gaming Authority breach formed the core of the dispute, and Wittmann sought clarification through the courts to ensure her ongoing commentary would not trigger further legal action, while the authority maintained that certain descriptions crossed into defamation territory that could damage its international standing in the online gaming sector.
Details of the Interim Ruling
The court decision explicitly authorizes Wittmann to use the phrase organized crime enablement scheme in reference to the Malta Gaming Authority and to retain access to the leaked materials for public discussion, and this outcome stems from arguments presented during the interim proceedings that emphasized the public interest in regulatory transparency within the iGaming industry, whereas the authority's position centered on protecting sensitive operational data from further dissemination.
Legal analysts tracking similar cases across European jurisdictions point out that interim rulings like this one often serve as preliminary steps before full trials, and they allow continued activity under defined parameters until a more comprehensive judgment emerges, yet the current order provides immediate relief for Wittmann's ability to publish findings without immediate risk of injunction enforcement.

Connection to the Curaçao Gaming Authority Leak
Separate from the Malta proceedings, Wittmann's disclosure of files from the Curaçao Gaming Authority portal exposed detailed ownership information for numerous offshore online casinos, and those revelations prompted media investigations under the Casino Secrets initiative that examined links between licensing entities and major operators, while the leak site reportedly went offline shortly after the Berlin verdict was issued.
The Curaçao files reportedly included records spanning multiple years of licensing activity, and they highlighted patterns of ownership that connected various gambling platforms to established companies in the sector, although the exact scope of those connections continues to surface through subsequent reporting by international outlets, and the timing of the site going dark coincided with heightened scrutiny following the German court outcome.
Broader Context in Gaming Regulation
Regulators in Malta and Curaçao have long played central roles in overseeing offshore online gambling operations that attract players worldwide, and breaches or leaks involving their systems draw attention because they reveal internal processes that typically remain shielded from public view, yet the Berlin ruling underscores how individual researchers can navigate legal boundaries when presenting such information, and similar cases have arisen in other European countries where freedom of information clashes with data protection claims.
International media coverage of the Curaçao disclosures under the Casino Secrets banner illustrated how leaked licensing data can fuel wider examinations of industry practices, and those reports often focus on ownership chains that tie smaller platforms back to larger entities, while the Malta case adds a layer of judicial precedent regarding the permissible scope of commentary about regulatory bodies themselves.
Current Status and Next Steps
As of September 2026 the interim ruling remains in effect, and Wittmann continues her work under the protections it provides, whereas the Malta Gaming Authority retains options to pursue additional legal avenues in full proceedings if it chooses, and the offline status of the original leak site leaves open questions about whether related materials will reappear through alternative channels or mirrored archives.
Those monitoring the situation note that full resolution of the underlying disputes may take additional months or years depending on appeals and further filings, yet the current decision already alters the environment for public discussion of regulatory oversight in the online gaming space, and it provides a concrete example of how German courts handle interim requests involving cybersecurity researchers and foreign regulatory entities.
Conclusion
The Berlin court outcome in favor of Lilith Wittmann marks a notable development in the ongoing tension between regulatory confidentiality and public scrutiny of gaming authorities, and it directly enables continued reference to both the Malta documents and the broader context of the Curaçao leak that exposed extensive ownership details across the offshore sector, while the precise long-term effects on industry transparency will unfold through subsequent legal and media developments.