2026 CNOPS (Morocco) — national health insurance fund user data exposure claims (Apr)
Data compromised
Insured user and administrative identity fields per Moroccan press and intel summaries
Technical writeup
In early April 2026, Moroccan and Francophone outlets (Ivoire Matin summaries, Resecurity blog context on parallel CNSS/CNOPS-themed incidents, Maroc.ma cyberattack commentary) described a wave of state-institution targeting including Morocco’s CNOPS (Caisse Nationale des Organismes de Prévoyance Sociale) social-health insurance ecosystem, with cyber-intelligence posts citing actor handles such as JBT2026. Exact validated row counts were not uniform across sources; reporting emphasized identity-fraud risk for insured households.
Root cause
State-sector intrusion / data leak claims (attribution and chain disputed)
References
- https://ivoirematin.com/en/news/Afrique/etat-dalerte-au-maroc-la-cnops-ciblee-par-une-cyberattaque-denvergure_n_120307.html
- https://www.maroc.ma/en/news/morocco-calls-cyberattacks-state-institutions-criminal-links-timing-us-sahara-stance
- https://therecord.media/morocco-investigates-breach-hackers-algeria
- https://x.com/VECERTRadar/status/2042067582329512269