Hackers breach Morocco’s social security database in an unprecedented cyberattack

Hey there, time traveller!
This article was published 10/04/2025 (397 days ago), so information in it may no longer be current.

RABAT, Morocco (AP) — Morocco ‘s social security agency said troves of data were stolen from its systems in a cyberattack this week that resulted in personal information being leaked on the messaging app Telegram.

The North African kingdom’s social security fund administers pensions and insurance benefits to millions of private sector workers, from assembly line laborers to corporate executives. It said in a statement Wednesday that preliminary investigations suggest the leak resulted from hackers bypassing its security systems.

The agency did not say who was thought to be responsible for the leak while also claiming that many of the documents posted were “misleading, inaccurate, or incomplete.”

The hackers who posted the documents on Telegram said the attack was in response to alleged Moroccan “harassment” of Algeria on social media platforms, pledging additional cyberattacks if Algerian sites were targeted.

Moroccan media have attributed the attack to Algerian hackers, describing it as an episode in a larger cyberwar between the two countries.

Relations between Algeria and Morocco have recently deteriorated to historic lows. The countries have withdrawn their ambassadors, closed their embassies and respective airspaces. Algeria’s support for the Polisario Front, a pro-independence movement fighting Morocco over the disputed Western Sahara, is among the roots of the tensions.

Some of the leaked information touches on deeply sensitive issues in Morocco. Among the leaked documents is salary information that, if accurate, would reflect vast inequalities that continue to plague Morocco despite its strides in economic development. The trove includes unverified financial data on executives of state-owned companies, political parties, figures associated with the royal family’s holding company and charity fund, and the Israeli liaison office in Rabat.

Morocco’s National Commission for the Protection of Personal Data said on Thursday that it stood ready to investigate complaints from people targeted in the leak.

Mustapha Baitas, Morocco’s government spokesperson, linked the attack to what he said was growing support for Morocco in the conflict from the international community — something he said “disturbs the enemies of our country to the point of attempting to harm it through these hostile actions.”

U.S. Secretary of State Marco Rubio said earlier this week said he supported Morocco’s plan for the disputed territory, a statement Algeria criticized on Thursday.

During his first term in office, President Donald Trump shifted Washington’s longstanding position in 2020 to back Morocco’s sovereignty over the territory. President Joe Biden’s administration neither reversed nor openly supported the policy.