Rabat, April 2025 — Morocco’s national social security agency has confirmed it suffered a major cyberattack this week, resulting in the theft and online publication of sensitive personal data. The breach, described as one of the most significant in the country’s history, targeted the Caisse Nationale de Sécurité Sociale (CNSS), which manages pensions, health insurance, and social welfare benefits for millions of private-sector employees.
In an official statement on Wednesday, the CNSS acknowledged that its systems were compromised, allowing attackers to exfiltrate data later posted on the encrypted messaging platform Telegram. The agency said preliminary investigations point to “unauthorised access” to its infrastructure, though it did not name the perpetrators.
The leaked files reportedly contain personal records of Moroccan citizens, but the CNSS stated that “many of the documents shared appear to be misleading, inaccurate, or incomplete.” Authorities have launched a formal inquiry to assess the scale and impact of the breach.
Hackers Claim Retaliation Over Morocco-Algeria Tensions
A group claiming responsibility for the attack cited alleged Moroccan “harassment” of Algerian users on social media as the motive, warning of further retaliation if such actions continued. The hackers’ message, posted alongside the leaked documents, framed the breach as part of a broader campaign of cyber-resistance.
Several Moroccan media outlets, including Le360 and Hespress, attributed the breach to Algerian-based hacker groups, casting the incident as part of an ongoing cyberconflict between Rabat and Algiers—two North African rivals with longstanding political and diplomatic tensions.
The Moroccan government has not officially commented on these claims, while Algerian authorities have yet to respond.
Growing Cybersecurity Concerns in the Region
This incident highlights the growing cybersecurity vulnerabilities of critical national infrastructure in North Africa, where state institutions increasingly face politically motivated cyber threats. Analysts warn that escalating digital hostilities between Morocco and Algeria could expose sensitive sectors—including government, finance, and energy—to future attacks.
Cybersecurity experts are urging Moroccan agencies to conduct comprehensive audits, update cyber defense protocols, and enhance regional cooperation to prevent further incidents.
Sources:
- CNSS Morocco Official Statement, April 2025
- Le360.ma, Hespress.com (April 2025 Coverage)
- Telegram Public Channel Leak Posts (via open-source intelligence tracking)
- Reuters & AFP coverage on Morocco-Algeria cyber relations
Photo by Antoni Shkraba Studio on Pexel
