{"dataset":"incidents","count":30,"generated_at":"2026-11-12T11:56:34.454449+00:00","license_note":"Données publiques MoroccoBreaches — voir Docs/PUBLIC_DATA_EXPORT.md pour la méthodologie et les limites d'usage.","items":[{"incident_id":"MB-0025","edition":"morocco","country_code":"MA","date_start":"2026-04-12","date_end":null,"organization_id":"ORG-0025","campaign_id":null,"incident_type":"Fuite de données personnelles","nature":"Incident confirmé","actor_name":"Non établi","attribution_status":"separate_from_incident","status":"🟢 Incident confirmé; 400k non vérifié","confidence":"🟢 Incident confirmé; 400k non vérifié","confidence_tier":"confirmed","claimed_volume":"~100k utilisateurs selon OFPPT; ~400k selon source secondaire/VECERT","verified_volume":"OFPPT confirme incident et précise ~100k données exposées","official_confirmation":"yes","publication_status":"public","legal_sensitivity":"low","reputation_risk":"medium","title":"Incident MyWay de l'OFPPT"},{"incident_id":"MB-0030","edition":"morocco","country_code":"MA","date_start":"2026-04-08","date_end":null,"organization_id":"ORG-0030","campaign_id":null,"incident_type":"Fuite de données revendiquée","nature":"Claim + publication","actor_name":"Jabaroot DZ","attribution_status":"separate_from_incident","status":"🟠 Revendiqué / contesté","confidence":"🟠 Revendiqué / contesté","confidence_tier":"unconfirmed_contested","claimed_volume":"3M lignes revendiquées; ~1M personnes visibles dans un fichier selon Le360","verified_volume":"CNOPS n'a ni confirmé ni infirmé; président CNDP appelle à la prudence","official_confirmation":"unknown","publication_status":"public_with_caveat","legal_sensitivity":"medium","reputation_risk":"high","title":"CNOPS"},{"incident_id":"MB-0027","edition":"morocco","country_code":"MA","date_start":"2026-03-26","date_end":null,"organization_id":"ORG-0027","campaign_id":"MB-0023","incident_type":"Ransomware / extorsion revendiquée","nature":"Claim + publication alléguée","actor_name":"APT73 / Bashe","attribution_status":"separate_from_incident","status":"🟠 Revendiqué / à corroborer","confidence":"🟠 Revendiqué / à corroborer","confidence_tier":"claimed_plausible","claimed_volume":"~30 Go revendiqués","verified_volume":"Pas de confirmation officielle IAM retrouvée; certaines sources rapportent publication/menace","official_confirmation":"unknown","publication_status":"public_with_caveat","legal_sensitivity":"medium","reputation_risk":"critical","title":"Itissalat Al-Maghrib (IAM)"},{"incident_id":"MB-0028","edition":"morocco","country_code":"MA","date_start":"2026-03-26","date_end":null,"organization_id":"ORG-0028","campaign_id":"MB-0023","incident_type":"Ransomware / extorsion revendiquée","nature":"Claim","actor_name":"APT73 / Bashe","attribution_status":"separate_from_incident","status":"🟠 Revendiqué / non confirmé","confidence":"🟠 Revendiqué / non confirmé","confidence_tier":"claimed_plausible","claimed_volume":"~30 Go revendiqués dans la campagne","verified_volume":"Pas de confirmation officielle retrouvée","official_confirmation":"unknown","publication_status":"public_with_caveat","legal_sensitivity":"medium","reputation_risk":"critical","title":"2M"},{"incident_id":"MB-0029","edition":"morocco","country_code":"MA","date_start":"2026-03-26","date_end":null,"organization_id":"ORG-0029","campaign_id":"MB-0023","incident_type":"Ransomware / extorsion revendiquée","nature":"Claim","actor_name":"APT73 / Bashe","attribution_status":"separate_from_incident","status":"🟠 Revendiqué / non confirmé","confidence":"🟠 Revendiqué / non confirmé","confidence_tier":"claimed_plausible","claimed_volume":"~30 Go revendiqués dans la campagne","verified_volume":"Pas de confirmation officielle retrouvée","official_confirmation":"unknown","publication_status":"public_with_caveat","legal_sensitivity":"medium","reputation_risk":"critical","title":"Institut Royal des Études Stratégiques (IRES)"},{"incident_id":"MB-0023","edition":"morocco","country_code":"MA","date_start":"2026-03","date_end":null,"organization_id":"ORG-0023","campaign_id":null,"incident_type":"Ransomware / extorsion","nature":"Claim + publication","actor_name":"APT73 / Bashe","attribution_status":"separate_from_incident","status":"🟠 Claimed / plausible","confidence":"🟠 Claimed / plausible","confidence_tier":"claimed_plausible","claimed_volume":"~30 Go par organisation revendiqués","verified_volume":"Absence de confirmation officielle; données publiées selon revendication","official_confirmation":"unknown","publication_status":"public_with_caveat","legal_sensitivity":"medium","reputation_risk":"critical","title":"Revendications simultanées IAM / 2M / IRES"},{"incident_id":"MB-0026","edition":"morocco","country_code":"MA","date_start":"2026-01-13","date_end":null,"organization_id":"ORG-0026","campaign_id":null,"incident_type":"Intrusion / fuite revendiquée","nature":"Claim","actor_name":"Jabaroot","attribution_status":"separate_from_incident","status":"🟠 Revendiqué / non confirmé","confidence":"🟠 Revendiqué / non confirmé","confidence_tier":"claimed_plausible","claimed_volume":"Bases internes, contrats et fichiers administratifs; documents d'identité allégués","verified_volume":"Aucune confirmation officielle retrouvée; FRMF continue ses communications normales","official_confirmation":"unknown","publication_status":"public_with_caveat","legal_sensitivity":"medium","reputation_risk":"medium","title":"Fédération Royale Marocaine de Football (FRMF)"},{"incident_id":"MB-0022","edition":"morocco","country_code":"MA","date_start":"2025-08","date_end":null,"organization_id":"ORG-0022","campaign_id":null,"incident_type":"Fuite / exposition de données","nature":"Publication / claim","actor_name":"Jabaroot DZ","attribution_status":"separate_from_incident","status":"🟠 Claimed / contested","confidence":"🟠 Claimed / contested","confidence_tier":"unconfirmed_contested","claimed_volume":"10 responsables selon revendication","verified_volume":"Origine et compromission technique à établir","official_confirmation":"unknown","publication_status":"public_with_caveat","legal_sensitivity":"high","reputation_risk":"high","title":"Publication de données attribuées à la DGST"},{"incident_id":"MB-0020","edition":"morocco","country_code":"MA","date_start":"2025-06-02","date_end":null,"organization_id":"ORG-0020","campaign_id":null,"incident_type":"Exfiltration de données","nature":"Incident","actor_name":"Hackers / attribution initiale erronée","attribution_status":"separate_from_incident","status":"🟢 Confirmé","confidence":"🟢 Confirmé","confidence_tier":"confirmed","claimed_volume":"Non précisé","verified_volume":"DGSSI confirme Tawtik; ANCFCC non compromise","official_confirmation":"yes","publication_status":"public","legal_sensitivity":"low","reputation_risk":"low","title":"Fuite Tawtik initialement attribuée à l'ANCFCC"},{"incident_id":"MB-0021","edition":"morocco","country_code":"MA","date_start":"2025-06","date_end":null,"organization_id":"ORG-0021","campaign_id":null,"incident_type":"Fuite présumée","nature":"Claim","actor_name":"Jabaroot DZ","attribution_status":"separate_from_incident","status":"🟠 Claimed / unconfirmed","confidence":"🟠 Claimed / unconfirmed","confidence_tier":"claimed_plausible","claimed_volume":"Non précisé","verified_volume":"Ministère de la Justice nie intrusion de ses systèmes; enquête rapportée","official_confirmation":"unknown","publication_status":"public_with_caveat","legal_sensitivity":"medium","reputation_risk":"critical","title":"Revendication / données attribuées au CSPJ"},{"incident_id":"MB-0014","edition":"morocco","country_code":"MA","date_start":"2025-04-08","date_end":null,"organization_id":"ORG-0014","campaign_id":null,"incident_type":"Fuite de données / exfiltration revendiquée","nature":"Incident + publication","actor_name":"Jabaroot DZ","attribution_status":"separate_from_incident","status":"🟢 Incident confirmé; volumes à nuancer","confidence":"🟢 Incident confirmé; volumes à nuancer","confidence_tier":"confirmed","claimed_volume":"~2M salariés / ~500k entreprises revendiqués/publiés","verified_volume":"Une partie des données authentifiée par médias","official_confirmation":"unknown","publication_status":"public","legal_sensitivity":"low","reputation_risk":"high","title":"Fuite CNSS / ministère de l'Emploi"},{"incident_id":"MB-0015","edition":"morocco","country_code":"MA","date_start":"2025-04","date_end":null,"organization_id":"ORG-0015","campaign_id":null,"incident_type":"DDoS / attaque web ?","nature":"Incident","actor_name":"À déterminer","attribution_status":"unknown","status":"🟠 À documenter","confidence":"🟠 À documenter","confidence_tier":null,"claimed_volume":"Non précisé","verified_volume":"À vérifier","official_confirmation":"unknown","publication_status":"public_with_caveat","legal_sensitivity":"medium","reputation_risk":"medium","title":"Vague gouvernementale incluant ministère de l'Agriculture"},{"incident_id":"MB-0017","edition":"morocco","country_code":"MA","date_start":"2025-04","date_end":null,"organization_id":"ORG-0017","campaign_id":null,"incident_type":"Cyberattaque ?","nature":"Incident / claim","actor_name":"À déterminer","attribution_status":"unknown","status":"🟠 À documenter","confidence":"🟠 À documenter","confidence_tier":null,"claimed_volume":"Non précisé","verified_volume":"À vérifier","official_confirmation":"unknown","publication_status":"public_with_caveat","legal_sensitivity":"medium","reputation_risk":"medium","title":"Vague coordonnée : Al Barid Bank"},{"incident_id":"MB-0016","edition":"morocco","country_code":"MA","date_start":"2025-04","date_end":null,"organization_id":"ORG-0016","campaign_id":null,"incident_type":"Cyberattaque ?","nature":"Incident / claim","actor_name":"À déterminer","attribution_status":"unknown","status":"🟠 À documenter","confidence":"🟠 À documenter","confidence_tier":null,"claimed_volume":"Non précisé","verified_volume":"À vérifier","official_confirmation":"unknown","publication_status":"public_with_caveat","legal_sensitivity":"medium","reputation_risk":"medium","title":"Vague coordonnée : AXA Assurance Maroc"},{"incident_id":"MB-0018","edition":"morocco","country_code":"MA","date_start":"2025-04","date_end":null,"organization_id":"ORG-0018","campaign_id":null,"incident_type":"Cyberattaque ?","nature":"Incident / claim","actor_name":"À déterminer","attribution_status":"unknown","status":"🟠 À documenter","confidence":"🟠 À documenter","confidence_tier":null,"claimed_volume":"Non précisé","verified_volume":"À vérifier","official_confirmation":"unknown","publication_status":"public_with_caveat","legal_sensitivity":"medium","reputation_risk":"medium","title":"Vague coordonnée : ANAM"},{"incident_id":"MB-0019","edition":"morocco","country_code":"MA","date_start":"2025-04","date_end":null,"organization_id":"ORG-0019","campaign_id":null,"incident_type":"Intrusion revendiquée","nature":"Claim","actor_name":"RootStorm","attribution_status":"separate_from_incident","status":"🟠 Claimed / plausible","confidence":"🟠 Claimed / plausible","confidence_tier":"claimed_plausible","claimed_volume":"Non précisé","verified_volume":"Non confirmé publiquement à ce stade","official_confirmation":"unknown","publication_status":"public_with_caveat","legal_sensitivity":"medium","reputation_risk":"medium","title":"RootStorm : revendication concernant le SIG Maroc"},{"incident_id":"MB-0034","edition":"morocco","country_code":"MA","date_start":"2024-11-16","date_end":null,"organization_id":"ORG-0033","campaign_id":null,"incident_type":"DDoS","nature":"Incident","actor_name":"Attribution alléguée à des hackers liés à l'Algérie","attribution_status":"separate_from_incident","status":"🟢 DDoS confirmé; attribution alléguée","confidence":"🟢 DDoS confirmé; attribution alléguée","confidence_tier":"confirmed","claimed_volume":"Non applicable","verified_volume":"Freedom House confirme l'indisponibilité pendant plusieurs jours; l'attribution reste l'allégation du média","official_confirmation":"unknown","publication_status":"public","legal_sensitivity":"low","reputation_risk":"medium","title":"Maroc Hebdo"},{"incident_id":"MB-0013","edition":"morocco","country_code":"MA","date_start":"2024","date_end":null,"organization_id":"ORG-0013","campaign_id":null,"incident_type":"Intrusion / OT","nature":"Tentatives","actor_name":"Non attribué","attribution_status":"unknown","status":"🟠 Tentatives uniquement","confidence":"🟠 Tentatives uniquement","confidence_tier":null,"claimed_volume":"Non précisé","verified_volume":"Aucune compromission confirmée dans le livre","official_confirmation":"unknown","publication_status":"public_with_caveat","legal_sensitivity":"medium","reputation_risk":"medium","title":"Tentatives d'intrusion sur systèmes industriels"},{"incident_id":"MB-0033","edition":"morocco","country_code":"MA","date_start":"2023-03-08/15","date_end":null,"organization_id":"ORG-0033","campaign_id":null,"incident_type":"Défacement / compromission du site web","nature":"Incident","actor_name":"Acteurs présentés par Maroc Hebdo comme hackers algériens","attribution_status":"separate_from_incident","status":"🟢 Attaque du site confirmée; attribution non indépendante","confidence":"🟢 Attaque du site confirmée; attribution non indépendante","confidence_tier":"confirmed","claimed_volume":"Non applicable","verified_volume":"Le média rapporte perturbations, remplacement de la page d'accueil, destruction des archives et compromission alléguée de données du personnel; détails techniques indépendants limités","official_confirmation":"yes","publication_status":"public","legal_sensitivity":"low","reputation_risk":null,"title":"Maroc Hebdo"},{"incident_id":"MB-0012","edition":"morocco","country_code":"MA","date_start":"2023-03","date_end":null,"organization_id":"ORG-0012","campaign_id":null,"incident_type":"Fuite de données","nature":"Publication / claim","actor_name":"Non attribué","attribution_status":"unknown","status":"🔴 Non confirmé / contesté","confidence":"🔴 Non confirmé / contesté","confidence_tier":"unconfirmed_contested","claimed_volume":"Centaines de milliers revendiqués","verified_volume":"Authenticité non officiellement confirmée","official_confirmation":"unknown","publication_status":"public","legal_sensitivity":"low","reputation_risk":"medium","title":"Fuite présumée de données électorales"},{"incident_id":"MB-0010","edition":"morocco","country_code":"MA","date_start":"2023-02","date_end":null,"organization_id":"ORG-0010","campaign_id":null,"incident_type":"DDoS","nature":"Incident","actor_name":"Non attribué officiellement","attribution_status":"unknown","status":"🟢 Confirmé","confidence":"🟢 Confirmé","confidence_tier":"confirmed","claimed_volume":"Non précisé","verified_volume":"MAP a confirmé et signalé au maCERT","official_confirmation":"yes","publication_status":"public","legal_sensitivity":"low","reputation_risk":null,"title":"DDoS contre les sites de la MAP"},{"incident_id":"MB-0011","edition":"morocco","country_code":"MA","date_start":"2023","date_end":null,"organization_id":"ORG-0011","campaign_id":null,"incident_type":"DDoS","nature":"Campagne","actor_name":"Anonymous Sudan","attribution_status":"separate_from_incident","status":"🟡 À corroborer","confidence":"🟡 À corroborer","confidence_tier":null,"claimed_volume":"Volumes précis à vérifier","verified_volume":"Impacts individuels à documenter","official_confirmation":"unknown","publication_status":"public_with_caveat","legal_sensitivity":"medium","reputation_risk":"medium","title":"Campagnes DDoS attribuées/revendiquées par Anonymous Sudan"},{"incident_id":"MB-0009","edition":"morocco","country_code":"MA","date_start":"2022-07","date_end":null,"organization_id":"ORG-0009","campaign_id":null,"incident_type":"Défacement / hacktivisme","nature":"Campagne","actor_name":"Non consolidé","attribution_status":"separate_from_incident","status":"🟡 À corroborer","confidence":"🟡 À corroborer","confidence_tier":null,"claimed_volume":">80 sites revendiqués dans le livre","verified_volume":"À vérifier directement","official_confirmation":"unknown","publication_status":"public_with_caveat","legal_sensitivity":"medium","reputation_risk":"high","title":"Vague hacktiviste : >80 sites en moins de 48h"},{"incident_id":"MB-0007","edition":"morocco","country_code":"MA","date_start":"2021-11","date_end":null,"organization_id":"ORG-0007","campaign_id":null,"incident_type":"Défacement","nature":"Incident","actor_name":"Probablement acteur algérien","attribution_status":"separate_from_incident","status":"🟢 Confirmé","confidence":"🟢 Confirmé","confidence_tier":"confirmed","claimed_volume":"Non applicable","verified_volume":"Base, messagerie et SI interne annoncés intacts","official_confirmation":"yes","publication_status":"public","legal_sensitivity":"low","reputation_risk":null,"title":"Défacement du site CGEM"},{"incident_id":"MB-0008","edition":"morocco","country_code":"MA","date_start":"2021-07/10","date_end":null,"organization_id":"ORG-0008","campaign_id":null,"incident_type":"Cyberespionnage / backdoor","nature":"Campagne","actor_name":"Lyceum (Iran)","attribution_status":"separate_from_incident","status":"🟢/🟡 Fortement corroboré","confidence":"🟢/🟡 Fortement corroboré","confidence_tier":"strongly_corrob","claimed_volume":"Non précisé","verified_volume":"Ciblage confirmé par recherches Accenture/Prevailion","official_confirmation":"unknown","publication_status":"public_with_caveat","legal_sensitivity":"medium","reputation_risk":"high","title":"Ciblage de FAI/opérateur télécom par Lyceum"},{"incident_id":"MB-0005","edition":"morocco","country_code":"MA","date_start":"2020-07","date_end":null,"organization_id":"ORG-0005","campaign_id":null,"incident_type":"Fuite de données","nature":"Claim","actor_name":"Non attribué","attribution_status":"unknown","status":"🟠 Claimed / plausible","confidence":"🟠 Claimed / plausible","confidence_tier":"claimed_plausible","claimed_volume":"Millions revendiquées","verified_volume":"Échantillon dit authentique dans le livre","official_confirmation":"unknown","publication_status":"public_with_caveat","legal_sensitivity":"medium","reputation_risk":"medium","title":"Données présumées d'un opérateur télécom vendues sur le dark web"},{"incident_id":"MB-0004","edition":"morocco","country_code":"MA","date_start":"2020","date_end":null,"organization_id":"ORG-0004","campaign_id":null,"incident_type":"Phishing / malware","nature":"Campagne","actor_name":"Non attribué","attribution_status":"unknown","status":"🟡 Corroboré au niveau menace/campagne","confidence":"🟡 À corroborer","confidence_tier":null,"claimed_volume":"Non précisé","verified_volume":"Non vérifié individuellement","official_confirmation":"unknown","publication_status":"public_with_caveat","legal_sensitivity":"medium","reputation_risk":"medium","title":"Campagnes de phishing liées au COVID-19"},{"incident_id":"MB-0032","edition":"morocco","country_code":"MA","date_start":"2017-2018","date_end":null,"organization_id":"ORG-0032","campaign_id":null,"incident_type":"Cyberespionnage / spear-phishing","nature":"Campagne","actor_name":"Acteur inconnu (Operation Parliament)","attribution_status":"separate_from_incident","status":"🟡 Fortement corroboré au niveau campagne / victime individuelle non établie","confidence":"🟡 Fortement corroboré au niveau campagne / victime individuelle non établie","confidence_tier":"strongly_corrob","claimed_volume":"Non précisé","verified_volume":"Kaspersky identifie le Maroc parmi les pays où des victimes ont été observées; cible marocaine précise et compromission individuelle non publiquement détaillées","official_confirmation":"unknown","publication_status":"public_with_caveat","legal_sensitivity":"medium","reputation_risk":"high","title":"Organisations gouvernementales et hauts responsables au Maroc (victimologie de campagne)"},{"incident_id":"MB-0002","edition":"morocco","country_code":"MA","date_start":"2017","date_end":null,"organization_id":"ORG-0002","campaign_id":null,"incident_type":"Phishing / espionnage","nature":"Campagne","actor_name":"Non attribué","attribution_status":"unknown","status":"🟠 À documenter","confidence":"🟠 À documenter","confidence_tier":null,"claimed_volume":"Non précisé","verified_volume":"Non vérifié publiquement","official_confirmation":"unknown","publication_status":"public_with_caveat","legal_sensitivity":"medium","reputation_risk":"high","title":"Campagnes de spear-phishing contre l'administration"},{"incident_id":"MB-0001","edition":"morocco","country_code":"MA","date_start":"2015-2016","date_end":null,"organization_id":"ORG-0001","campaign_id":null,"incident_type":"Hacktivisme / défacement","nature":"Campagne","actor_name":"Team Algeria / DZ Hackers / autres","attribution_status":"separate_from_incident","status":"🟡 À corroborer","confidence":"🟡 À corroborer","confidence_tier":null,"claimed_volume":"Plusieurs centaines selon le livre","verified_volume":"Non établi","official_confirmation":"unknown","publication_status":"public_with_caveat","legal_sensitivity":"medium","reputation_risk":"medium","title":"Campagne de défacements .ma"}]}