{"dataset":"evidence","count":15,"generated_at":"2026-11-12T11:56:33.724873+00:00","license_note":"Données publiques MoroccoBreaches — voir Docs/PUBLIC_DATA_EXPORT.md pour la méthodologie et les limites d'usage.","items":[{"id":"EV-MB-0002-01","claim_id":null,"source_id":"S033","relation":"supports","description":"Kaspersky documents Operation Parliament as a geopolitically motivated espionage campaign beginning in 2017, targeting high-profile legislative, executive and judicial bodies, especially in MENA.","url":"https://securelist.com/operation-parliament-who-is-doing-what/85237/","evidence_type":"campaign_research","incident_id":"MB-0002"},{"id":"EV-MB-0007-01","claim_id":null,"source_id":"S034","relation":"supports","description":"Freedom House reports the CGEM website was hacked/defaced in November 2021 and separately documents Lyceum attacks against Moroccan ISPs; it notes unclear impact for ISPs/customers.","url":"https://freedomhouse.org/country/morocco/freedom-net/2022","evidence_type":"independent_country_report","incident_id":"MB-0007"},{"id":"EV-MB-0008-01","claim_id":null,"source_id":"S034","relation":"supports","description":"Freedom House documents Lyceum cyberattacks against Moroccan ISPs from July to October 2021, while stating the impact was unclear.","url":"https://freedomhouse.org/country/morocco/freedom-net/2022","evidence_type":"independent_country_report","incident_id":"MB-0008"},{"id":"EV-MB-0010-01","claim_id":null,"source_id":"S004","relation":"supports","description":"MAP websites were targeted by DDoS and the incident was reported to maCERT.","url":"https://snrtnews.com/fr/article/les-sites-web-de-la-map-cibles-dune-cyberattaque-ddos-67431","evidence_type":"victim_confirmation","incident_id":"MB-0010"},{"id":"EV-MB-0014-01","claim_id":null,"source_id":"S035","relation":"supports","description":"CNSS acknowledged a cyber incident/data exposure; exact total compromised remains distinct from published volume.","url":"https://medias24.com/2025/04/09/attaque-cybernetique-contre-la-cnss-les-premieres-verifications-ont-permis-de-relever-certains-documents-faux-inexacts-ou-tronques-communique/","evidence_type":"official_statement","incident_id":"MB-0014"},{"id":"EV-MB-0014-02","claim_id":null,"source_id":"S035","relation":"supports","description":"CNSS said its IT system was subjected to a series of cyberattacks that caused a data leak; some circulated documents were false, inaccurate or truncated.","url":"https://medias24.com/2025/04/09/attaque-cybernetique-contre-la-cnss-les-premieres-verifications-ont-permis-de-relever-certains-documents-faux-inexacts-ou-tronques-communique/","evidence_type":"official_statement_relay","incident_id":"MB-0014"},{"id":"EV-MB-0014-03","claim_id":null,"source_id":"S036","relation":"supports","description":"Le Monde reports that portions of the published CNSS documents were authenticated by media and that more than two million people were implicated in the published material; this is publication volume, not automatically verified total compromise.","url":"https://www.lemonde.fr/afrique/article/2025/04/10/au-maroc-des-milliers-de-documents-confidentiels-mis-en-ligne-apres-une-cyberattaque-contre-la-caisse-nationale-de-securite-sociale_6593572_3212.html","evidence_type":"independent_media_authentication","incident_id":"MB-0014"},{"id":"EV-MB-0025-01","claim_id":null,"source_id":"S003","relation":"supports","description":"OFPPT confirmed a MyWay cybersecurity incident and approximately 100,000 affected users; technical cause remains qualified.","url":"https://www.ofppt.ma/ar/communiques-de-presse/incident-de-cybersecurite-de-lofppt%C2%A0eclairage","evidence_type":"victim_statement","incident_id":"MB-0025"},{"id":"EV-MB-0026-01","claim_id":null,"source_id":"S019","relation":"supports","description":"Review of FRMF public communications found no confirmation of the alleged compromise in the consulted official material.","url":"https://frmf.ma/fr/articles/communique-de-la-federation-royale-marocaine-de-football","evidence_type":"official_communications_review","incident_id":"MB-0026"},{"id":"EV-MB-0030-01","claim_id":null,"source_id":"S018","relation":"supports","description":"Le360 reports the CNOPS claim and the CNDP president's call for caution; claimed volume must remain distinct from verified volume.","url":"https://fr.le360.ma/societe/cyberattaque-contre-la-cnops-le-president-de-la-cndp-omar-seghrouchni-evoque-un-agenda-politique_ZANUPH3X7VEENACS7GZCSFX4NA/","evidence_type":"media_and_regulator_caution","incident_id":"MB-0030"},{"id":"EV-MB-0033-01","claim_id":null,"source_id":"S029","relation":"supports","description":"Maroc Hebdo reported that its website was attacked/defaced in March 2023; attribution to Algerian hackers is the victim's attribution, not independently established.","url":"https://fr.le360.ma/medias/le-site-web-du-journal-maroc-hebdo-attaque-par-des-hackers-algeriens_VX57A6LPMFEINPOQOWLDGKTURY/","evidence_type":"victim_report","incident_id":"MB-0033"},{"id":"EV-MB-0034-01","claim_id":null,"source_id":"S031","relation":"supports","description":"Freedom House 2025 reports the November 2024 DDoS disruption against Maroc Hebdo; attribution remains reported/alleged.","url":"https://freedomhouse.org/country/morocco/freedom-net/2025","evidence_type":"independent_country_report","incident_id":"MB-0034"},{"id":"EV-MB-0020-01","claim_id":"C002","source_id":"S002","relation":"contradicts","description":"DGSSI stated that the exposed data originated from Tawtik and that ANCFCC systems were not compromised.","url":"https://www.dgssi.gov.ma/index.php/fr/actualites/clarifications-au-sujet-des-recentes-fuites-de-donnees","evidence_type":"official_investigation","incident_id":"MB-0020"},{"id":"EV-MB-0021-01","claim_id":"C003","source_id":"S038","relation":"contradicts","description":"The Justice Ministry states the circulated data did not belong to its information systems and that its systems had not been breached or leaked.","url":"https://justice.gov.ma/2025/06/11/%D8%A8%D9%84%D8%A7%D8%BA-%D8%AA%D9%88%D8%B6%D9%8A%D8%AD%D9%8A-%D9%84%D9%84%D8%B1%D8%A3%D9%8A-%D8%A7%D9%84%D8%B9%D8%A7%D9%85/","evidence_type":"official_denial","incident_id":"MB-0021"},{"id":"EV-MB-0021-02","claim_id":"C003","source_id":"S038","relation":"contradicts","description":"The Ministry of Justice denied that the circulated data belonged to its systems and denied a compromise of Ministry systems. This does not by itself prove or disprove a separate CSPJ compromise.","url":"https://justice.gov.ma/2025/06/11/%D8%A8%D9%84%D8%A7%D8%BA-%D8%AA%D9%88%D8%B6%D9%8A%D8%AD%D9%8A-%D9%84%D9%84%D8%B1%D8%A3%D9%8A-%D8%A7%D9%84%D8%B9%D8%A7%D9%85/","evidence_type":"official_denial_related_entity","incident_id":"MB-0021"}]}