According to France 24, Morocco's National Social Security Fund (CNSS) suffered a cyberattack in which data belonging to nearly two million citizens was reportedly taken [1]. The report described the impact of the incident on citizens' personal data and subsequent scam risks [1]. Where threat actor identity appears only via media relays of self-proclaimed claims without official confirmation, this entry does not state it as verified state attribution [1].
This event has not been officially confirmed. Content is based on media or third-party reports.
Backfill: this event became public on Apr 10, 2025 and we added it on Nov 10, 2026. It is not a new event.
CriticalMonitoringBackfillMedia reported
French Media Reports Cyberattack and Citizen Data Leak at Morocco's CNSS Social Security Fund
1 min read
- Disclosed
- Apr 10, 2025
- Published
- Nov 10, 2026
- Last updated
- Nov 7, 2026
- Scale
- 2,000,000 people[1]
- CVSS basis
- Our assessment
- Attack vector
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Government
What to do nowOur advice
Where threat actor identity appears only via media relays of self-proclaimed claims without official confirmation, this entry does not state it as verified state attribution [1].
Timeline
- Incident publicly disclosed[1]
Technical details
Source-Supported Details
France 24 reported on April 10, 2025, that CNSS suffered an attack involving a large-scale data leak. Affected headcounts follow the wording of that report, and subsequent official statements regarding the authenticity of leaked documents are governed by their respective original texts [1].
Source excerpt: "Publié le : 10/04/2025 - 21:18 3 min Temps de lecture Partager Par : FRANCE 24 Un homme consulte son ordinateur, au Maroc." [1].
References
Media1
- [1]
“Publié le : 10/04/2025 - 21:18 3 min Temps de lecture Partager Par : FRANCE 24 Un homme consulte son ordinateur, au Maroc.”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.