A Berlin court has ruled largely against the Malta Gaming Authority in its injunction case against German security researcher Lilith Wittmann, allowing her to continue using documents obtained from MGA systems and publicly characterize the regulator as an “organized crime enablement scheme.” The court barred her from accessing MGA systems again, according to Wittmann’s account reported by Bitcoin News.
The ruling, delivered in interim injunction proceedings, represents a setback for the MGA’s effort to silence criticism from a researcher who has become a prominent critic of offshore gambling regulators. Hours after the verdict was announced, the registry suspended the domain hosting Wittmann’s separate “Casino Secrets” leak.
What the Berlin Court Decided
Wittmann announced the result on X on Friday. “Just received the verdict in Malta Gaming Authority v. Wittmann,” she wrote, according to Bitcoin News. “Good news: I can call the MGA an organized crime enablement scheme and use the documents I obtained. Bad news: I’m not allowed to hack them again.”
A screenshot of the judgment’s first page, which Wittmann posted, identifies the case as 7 O 254/26 eV at the Landgericht Berlin II. The document describes a judgment issued in interim injunction proceedings. The applicants are the Malta Gaming Authority, represented by CEO Charles Mizzi, and Mizzi himself, with Bird & Bird LLP acting for both.
The screenshot does not show the operative part of the ruling, and the full judgment has not been published. As Bitcoin News noted, the reported outcome rests on Wittmann’s account.
Background of the Dispute
The case stems from Wittmann’s breach of an internal MGA system in March 2026, a separate intrusion from the Curaçao breach behind the “Casino Secrets” site. The Maltese regulator obtained an interim injunction against her, which she said targeted her public claims that it enables organized crime and sought to prevent further access to its systems.
Wittmann contested the injunction, and the court heard her objection on Sept. 10. She has called the case a SLAPP, a strategic lawsuit against public participation, and said it has produced roughly 2,000 pages of court documents.
According to Bitcoin News, she said the case cost her between €15,000 and €20,000 in legal fees. A loss, she said, could have exposed her to a penalty of €250,000 or six months in prison.
Casino Secrets Site Goes Offline
Hours after the verdict, the Casino Secrets archive’s original address went offline. Registry records show casinosecrets.lol was placed on “server hold,” a registry-level suspension applied at 12:05 UTC on Friday, Bitcoin News reported.
Wittmann said the .lol registry, XYZ, had acted faster than Cloudflare. She had questioned earlier in the week whether XYZ would keep the site online because, in her framing, most of the illegal casinos are its customers. The leaked database has since moved to curacaofiles.com, a domain registered in December 2025, and remains served through Cloudflare.
Broader Regulatory Context
The MGA oversees 311 active licensees, according to Next.io. The EU’s top court ruled in April that a German player can reclaim losses from a Malta-licensed operator, and an Advocate General called Malta’s law shielding its operators from foreign judgments “manifestly incompatible” with EU rules, as Bitcoin News reported.
Wittmann has used roughly 3,000 documents from the MGA’s systems in her reporting, including filings she says identify the owner behind Platincasino, the brand at the center of her German investigation. Frankfurt prosecutors searched 11 properties and arrested a main suspect on Sept. 8.
