Rabat – Morocco’s Center for Monitoring, Detection, and Response to Computer Attacks (maCERT) has raised an alarm over phishing attempts targeting Gmail users, following a significant leak of sensitive information from Google’s systems.
In a recent notice, maCERT explained that the hacker group “ShinyHunters” broke into an internal database managed by Salesforce.
The breach exposed details linked to hundreds of millions of Google accounts. The stolen data includes names of individuals and companies, along with phone numbers.
Authorities said that several Gmail users already received fraudulent messages and calls from individuals who claim to work for Google.
These callers warn of supposed security problems with user accounts in order to extract more information.
Google acknowledged the intrusion but insisted that passwords remain secure.
Moroccan authorities urged Gmail users to treat any suspicious communication with caution and to avoid sharing personal details. They described the incident as a large-scale attempt to gain access to accounts through phishing methods.
Since 2004, more than 18.5 million Moroccan accounts have been compromised, placing the country 60th globally, according to Surfshark. The report noted a 125% jump in breaches in the second quarter of 2025 compared to the first.
Major leaks have included Addka’s 3.3 billion email list, which exposed nearly 1.8 million Moroccan accounts, along with breaches of Wattpad and Aptoide. Within North Africa, Morocco trails Egypt but remains ahead of Algeria, Tunisia, and Libya in total compromised accounts.
