Massive Cyberattack Hits Morocco’s Social Security System: Data Leaked on Telegram

In a major breach of national security, hackers have infiltrated Morocco’s social security database, leaking sensitive personal information across the messaging app Telegram. The attack marks one of the most serious cyber incidents in the country’s history, raising alarm bells over digital infrastructure vulnerabilities in North Africa.

• Target: Morocco’s social security fund, which manages pensions and insurance for millions.
• Breach: Hackers stole and leaked personal data, including salary and financial information.
• Suspected Motive: Linked to regional tensions between Morocco and Algeria.
• Impact: Potential exposure of data tied to executives, political figures, and foreign offices.
• Response: Morocco’s data protection agency and government vow to investigate and respond.

Earlier this week, hackers bypassed Morocco’s cybersecurity defenses, gaining access to vast databases managed by the national social security agency. Authorities confirmed the breach on Wednesday, revealing that leaked data had surfaced on Telegram—a platform often used to disseminate hacked materials.

The stolen files allegedly contain sensitive salary information, unverified financial records, and data tied to public figures, government-linked companies, political parties, and even the Israeli liaison office in Rabat.

Though the hackers have not been officially identified, many in the Moroccan press and digital forensics communities are pointing to Algerian hacker groups. The attackers claimed the breach was retaliation for what they called Morocco’s “harassment” of Algeria on social media, warning of more cyberattacks if the digital hostilities continued.

This breach comes amid rapidly escalating tensions between Morocco and Algeria. The two countries have already severed diplomatic ties, closed embassies, and banned flights from each other’s airspace—largely fueled by their longstanding conflict over Western Sahara.

The leak could reveal uncomfortable truths about Morocco’s economic disparities. If the documents are accurate, they highlight stark income gaps between ordinary citizens and the nation’s elite—despite ongoing efforts at development and reform.

Some documents are reportedly linked to individuals associated with the royal family’s holding company and its charitable foundations, as well as executives from state-owned enterprises. Moroccan officials insist that many of the files are “misleading, inaccurate, or incomplete,” though the fallout has already sparked public concern.

The National Commission for the Protection of Personal Data announced Thursday that it is ready to investigate any complaints from those whose data was compromised. Meanwhile, government spokesperson Mustapha Baitas framed the attack as part of a broader campaign against Morocco’s growing international support—particularly regarding its sovereignty claims over Western Sahara.

“These actions aim to harm Morocco, especially as international support for our position grows,” Baitas said.

U.S. Secretary of State Marco Rubio expressed support earlier this week for Morocco’s proposal regarding the disputed Western Sahara, drawing sharp criticism from Algeria. The position echoes that of former President Donald Trump, who in 2020 recognized Morocco’s claim over the territory. The Biden administration has yet to reverse—or fully endorse—that policy.