Morocco’s National Social Security Fund (CNSS) has confirmed a significant cyberattack that compromised sensitive data belonging to millions of private-sector employees, marking one of the country’s largest cybersecurity incidents to date. The breach, attributed to an Algerian hacking group, has escalated tensions between the two North African nations amid ongoing geopolitical disputes.

Breach Details and Hacker Motivations

The attackers, identifying themselves as “Jabaroot,” claimed responsibility for infiltrating CNSS systems, exfiltrating approximately 500,000 records, including 54,000 PDF files containing salary certificates, employee lists, and financial data from public and private entities. The leaked trove reportedly includes sensitive information about executives at state-owned companies, political parties, and even the Israeli liaison office in Rabat.

The hackers framed the attack as retaliation against Morocco’s alleged “harassment” of Algerian social media platforms, specifically referencing the suspension of the Algerian Press Service (APS) account on Platform X. They threatened further cyber operations unless Moroccan-linked attacks on Algerian digital assets cease.

Scale and Impact

The breach potentially affects nearly 2 million employees across 500,000 businesses registered with CNSS, which manages pensions and insurance for Morocco’s private sector. Additionally, the Ministry of Economic Integration, Small Enterprise, Employment, and Skills (MIEPEEC) was targeted, with hackers leaking a 75 MB archive purportedly containing ministry payroll files 2.

CNSS officials acknowledged the breach but dismissed portions of the leaked data as “misleading, inaccurate, or incomplete.” They emphasized that security protocols were activated to contain the attack and strengthen infrastructure 2. Morocco’s National Commission for the Protection of Personal Data has pledged to investigate complaints from affected individuals.

Political and Economic Repercussions

The attack underscores deepening tensions between Algeria and Morocco, which have severed diplomatic ties and closed airspaces over disputes related to Western Sahara. Algerian support for the Polisario Front, a Sahrawi independence movement, remains a core issue 1.

The leaked salary data has also ignited domestic concerns, revealing stark economic inequalities. Documents allegedly detail earnings of high-profile figures linked to Morocco’s royal family and state-owned enterprises, fueling public scrutiny.

Moroccan government spokesperson Mustapha Baitas linked the attack to Morocco’s growing international support for its Western Sahara policy, stating that adversaries are resorting to “hostile actions” to undermine the nation 1. The U.S. has maintained a neutral stance on the territory since President Biden took office, though Secretary of State Marco Rubio recently voiced support for Morocco’s sovereignty plan, drawing criticism from Algeria.

Regional Cyberwarfare Escalation

The incident reflects a broader pattern of cyber hostilities between Algeria and Morocco. Moroccan media reported retaliatory attacks on Algerian government websites, while cybersecurity experts warn of an intensifying digital conflict 2. Political leaders, including Abdellah Bouanou of Morocco’s Justice and Development Party, are urging enhanced cybersecurity measures for public institutions.

Ongoing Investigations

CNSS has launched an internal probe and notified judicial authorities. Citizens and media outlets have been cautioned against sharing leaked data, which could lead to legal consequences 2. Meanwhile, cybersecurity firms and international observers are monitoring the situation for further developments.

This breach highlights the vulnerability of critical social infrastructure to politically motivated cyberattacks and the urgent need for robust defenses in an era of escalating digital warfare.

For further details, refer to the original sources: SecurityWeek and Morocco World News.