Join on WhatsApp
Join on Telegram
Doha – The Moroccan National Agency for Land Conservation, Cadastre and Cartography (ANCFCC) has become the latest victim of a major cyberattack claimed by “Jabaroot,” the same hacker group behind April’s CNSS breach.
The group, which identifies itself as Algerian, announced the attack on Monday, allegedly resulting in the theft and subsequent leak of thousands of sensitive property documents.
According to claims the group made on their Telegram channel, the hackers have exfiltrated and released what they describe as “a massive amount of sensitive data” from ANCFCC’s databases.
The leaked information reportedly includes 10,000 property ownership certificates out of a total database of more than 10 million land titles.
The compromised data allegedly contains cadastral information, property owner identities, real estate references, and various personal and administrative documents.
These include approximately 20,000 various documents such as sales deeds, civil status documents, copies of ID cards, passports, and banking documents, amounting to approximately 4 terabytes of data.
This cyberattack comes approximately two months after the same group claimed responsibility for hacking the National Social Security Fund (CNSS) database in April. That intrusion exposed personal data of nearly 2 million Moroccan employees across approximately 500,000 businesses registered with the CNSS.
Immediately following that earlier breach, the land registry agency had temporarily suspended access to its online platform on April 14—particularly the service dedicated to notaries—and decided to close the platform entirely to all professionals and users, reverting to paper-based filing and in-person payments at physical counters using the old method.
The agency had then urged all professionals—including notaries, lawyers, and users—to go directly to land registry agencies to process their filings and payments in person until further notice.
An ‘unjustified intervention’
The Jabaroot group has justified this attack as a direct response to what they call “Moroccan media’s false propaganda” regarding rumors about France freezing assets belonging to high-ranking Algerian officials.
“These political tensions only concern France and Algeria,” the group stated, describing the alleged propaganda as “an unjustified intervention and an opportunistic way to attack Algeria again on the international stage.”
Some of the first documents published on the Telegram channel reportedly involve real estate transactions by high-profile Moroccan public figures.
The hackers specifically claim to have released sensitive documents belonging to senior Moroccan officials, including what they allege are documents of Mohamed Yassine Mansouri, the director general of foreign intelligence.
The group has made serious allegations that “while the Moroccan people suffer from poverty and deprivation in various forms, Mansouri spent more than MAD 3.5 million ($350,000) between 2022 and 2023, and established companies in his daughter’s name.”
At the time of reporting, ANCFCC has not yet officially addressed the origin of these alleged leaks or the authenticity of the circulated documents. It remains unclear whether the method of intrusion into the land registry database is identical to the one used against the CNSS.
