Moroccan Authorities Deny Cyberattack, Claim Data Leak from External Sources

Moroccan Security Agencies Refute Cyberattack Claims

The Moroccan authorities have firmly denied any allegations of a cyberattack on their databases, asserting that the personal data published by a hacker group last Tuesday was obtained from external sources, specifically "insurance companies" and "health organizations." In a strong response, both the General Directorate of National Security (DGSN) and the General Directorate of Territorial Surveillance (DGST) categorically rejected any claims of breach against their information systems or security databases, emphasizing that they adhere to the highest standards of cybersecurity practices.

To further clarify their position, the DGST released a statement on their social media platforms, insisting that the personal data disclosed recently did not stem from a cyberattack on their security systems. Instead, they highlighted that it consisted of "old data downloaded from databases and information systems managed by insurance companies and health and social security organizations." Additionally, they cautioned against the frequent dissemination of manipulated photographs that are misleadingly presented as depicting employees from various security agencies, as well as the circulation of forged documents purportedly belonging to security authorities. The surveillance agency pointed out that the falsehood of these images and documents is evident, particularly due to the use of military uniforms and ranks that do not exist in Morocco or within the DGSN. They noted that the leaked documents contained inaccurate visual identities and glaring grammatical errors.

As a result, the authorities expressed their commitment to counter all false information claiming a cyberattack on their security data systems, reiterating that these systems are not connected to open internet networks. They also announced that investigations would continue to identify and apprehend all individuals involved in the creation, preparation, and dissemination of this misleading content.

Data Leak of Moroccan Security Agencies

This statement from Moroccan authorities follows the hacker group Jabaroot's publication of a list containing the personal information of over 70,000 individuals identified as members of security agencies and other national organizations in Morocco. The hackers claimed that their publication served as a "message directed at Spain" after thousands surrounded and invaded Ceuta on July 30. Jabaroot asserted that they possessed information regarding the individuals responsible for these events and the orders issued during that time. However, the data is no longer accessible, as the platform that hosted the information has since removed it.

About Jabaroot

Jabaroot is a hacker group that identifies itself as "Algerian patriots" and has claimed responsibility for various data leaks and cyberattacks targeting several public institutions in Morocco. Their first known action occurred in April 2025, when they leaked data belonging to millions of workers after successfully breaching the cybersecurity of the National Social Security Fund (CNSS). Since then, Jabaroot has conducted numerous data leaks related to Moroccan public agencies, primarily operating on the social media platform Telegram.

As reported by libertaddigital.com.