Moroccan Social Security Hit by Major Data Breach Amid Rising Tensions With Algeria

Morocco’s social security agency revealed that a cyberattack earlier this week led to the theft of large volumes of data, some of which has already been leaked via the messaging app Telegram.

The agency, which manages pensions and insurance benefits for millions of private sector employees — ranging from factory workers to business executives — stated on Wednesday that early investigations indicate hackers successfully bypassed their security systems.

While the agency did not name any suspected perpetrators, it noted that many of the documents circulating online were “misleading, inaccurate, or incomplete.”

The hackers who claimed responsibility for the breach said the attack was retaliation for alleged Moroccan “harassment” of Algeria on social media platforms. They warned of further cyberattacks if Algerian websites are targeted.

Moroccan news outlets have pointed the finger at Algerian hackers, framing the breach as part of an ongoing cyberconflict between the two nations.

Diplomatic relations between Morocco and Algeria have hit new lows, with embassies shuttered, ambassadors recalled, and airspace closures. The tensions largely stem from Algeria’s support of the Polisario Front, a group advocating for Western Sahara’s independence from Morocco.

Among the leaked data were documents allegedly exposing sensitive information, such as salary records that, if confirmed, would highlight the deep socioeconomic divides still present in Morocco despite economic progress. The leaks reportedly include unverified financial information related to executives of state-owned enterprises, political party officials, individuals tied to the royal family’s business and charitable ventures, and the Israeli liaison office in Rabat.

Following the breach, Morocco’s National Commission for the Protection of Personal Data announced it was prepared to investigate complaints from individuals affected by the leaks.

Government spokesperson Mustapha Baitas linked the cyberattack to Morocco's increasing international support regarding the Western Sahara dispute, suggesting that this growing backing had provoked Morocco’s adversaries into launching hostile actions.

Earlier this week, U.S. Secretary of State Marco Rubio expressed support for Morocco’s autonomy plan for the contested territory — a stance that Algeria publicly criticized. Washington’s position on Western Sahara has remained mostly unchanged since former President Donald Trump recognized Moroccan sovereignty over the region in 2020, a policy that President Joe Biden’s administration has neither overturned nor openly endorsed.