Morocco’s national social security system has suffered a major cyberattack, exposing the personal and financial data of millions. The leaked information was shared on Telegram by hackers claiming to act in retaliation for alleged online “harassment” of Algeria by Moroccan users.
The breach targeted Morocco’s Caisse Nationale de Sécurité Sociale (CNSS), which manages pensions and insurance benefits for private-sector workers. In a statement on Wednesday, the agency said attackers bypassed its digital defenses and accessed sensitive files. Many of these documents have now surfaced online.
The hackers behind the leak say they acted in response to growing hostility from Morocco. They also warned that more attacks could follow if Algeria remains a target of online campaigns.
Growing Cyberwar Between Morocco and Algeria
Moroccan media outlets have blamed the attack on Algerian hackers. They describe it as part of a broader cyberwar between the two countries. Tensions have been escalating in recent years. Both governments have recalled ambassadors, closed embassies, and restricted airspace access.
At the heart of the conflict is Algeria’s backing of the Polisario Front, a separatist group demanding independence for Western Sahara. Morocco claims sovereignty over the territory and has pushed back against Algerian support for the pro-independence movement.
This geopolitical rivalry has now spilled into the digital world.
What the Leaked Data Reveals
The leaked files reportedly include salary information for public and private sector figures. If accurate, the data reveals stark income inequalities across Moroccan society. The documents mention executives at state-owned companies, political party officials, and individuals linked to the royal family’s foundations.
Some documents even reference the Israeli liaison office in Rabat. However, authorities warn that many of the files are unverified and possibly misleading. The CNSS insists that parts of the data are incomplete or taken out of context.
Data Protection Authority Launches Investigation
In response, Morocco’s National Commission for the Protection of Personal Data (CNDP) has pledged to investigate any complaints. Citizens whose information was leaked can file formal reports for further review.
Government spokesperson Mustapha Baitas believes the timing of the attack is no coincidence. He said the breach came just as Morocco was gaining international support for its Western Sahara claims. “These actions aim to destabilize our progress,” he said. “They reflect the frustration of those who oppose our sovereignty.”
U.S. Backing Fuels Diplomatic Tension
U.S. Secretary of State Marco Rubio added fuel to the fire earlier this week. He publicly supported Morocco’s autonomy plan for Western Sahara—a move Algeria quickly condemned. The U.S. had already shifted its stance in 2020 under President Donald Trump, officially recognizing Moroccan sovereignty over the disputed territory.
President Joe Biden’s administration has neither reversed that decision nor openly reinforced it, keeping Washington’s position ambiguous. Still, Algeria sees the continued U.S. support as a threat to its regional influence.
