A significant cyberattack has targeted Morocco's National Social Security Fund (CNOPS), resulting in a major data breach. The incident, which occurred in early 2026, compromised a vast database containing sensitive personal information of millions of Moroccan citizens, including civil servants and their families.
According to verified reports, the leaked data includes national identification numbers, full names, birthdates, and detailed salary information. The breach was claimed by a known international ransomware group, which published samples of the stolen data on the dark web as proof of the attack.
Moroccan authorities have confirmed the incident and stated that an investigation is underway. The attack has raised serious concerns about the vulnerability of the country's critical social security infrastructure and the potential for this data to be used for identity theft or espionage.
Cybersecurity experts warn that the scale of the breach could have long-term implications for national security and public trust. The government has urged affected individuals to monitor their financial accounts and report any suspicious activity.