On March 20, 2026, German ethical hacker Lilith Wittman claimed that she was behind the Malta Gaming Authority system breach through a LinkedIn post, which has now been removed by the platform. This was not the first time that Wittman claimed responsibility for an attack on the gambling industry, with the first case being a
On March 20, 2026, German ethical hacker Lilith Wittman claimed that she was behind the Malta Gaming Authority system breach through a LinkedIn post, which has now been removed by the platform.
This was not the first time that Wittman claimed responsibility for an attack on the gambling industry, with the first case being a hack into Merkur’s system, which led to multiple offshore websites shutting down in 2025.
Wittman wrote on LinkedIn:
“Dear Malta Gaming Authority, Yes, I hacked you, and the data obtained has been shared with media partners, authorities…And yes, we will expose the organised crime enablement schemes you created while presenting yourselves as a ‘legitimate public service’. I hope the German authorities are, for once, smart and do not extradite me to Malta, where I would face up to 10 years imprisonment for hacking a public service.”
Wittman also warned that any police action from Malta would trigger the immediate release of the obtained data, as she is sure that the information she holds is so valuable for the public discourse that one day, obtaining it will be seen as a justified necessity.
In response, the Malta Gaming Authority addressed the allegations on March 20, 2026, and claimed that it has always worked within established legal frameworks and carried out its functions with integrity and accountability.
The MGA stated:
“The Malta Gaming Authority (MGA) is aware of public statements made by an individual claiming responsibility for unauthorized access to one of the Authority’s systems and making a series of allegations and threats in that context. The MGA condemns any unauthorised access to its systems and any extraction, handling, or dissemination of data obtained through such activity. Such conduct is unacceptable and incompatible with lawful engagement with public institutions and established governance frameworks.”
Wittman is a 30-year-old Berlin-based self-described “Krawall-Influencerin”, which roughly translates to “chaos influencer”.