leak Potential Morocco (MA) media

Email Lists of Four Moroccan Organizations Leaked

2M, IAM, IRES and HACA (Morocco)

📅 05 May 2026
Company2M, IAM, IRES and HACA (Morocco)
Domainhaca.ma
CountryMorocco (MA)
Sectormedia
Breach date2026-05-05
People affected150,000
Data typesNot disclosed

Overview

On 5 May 2026, a DarkForums user shared email address lists described as belonging to four well-known Moroccan organizations: 2M (television network), IAM (Maroc Telecom), IRES (strategic studies institute) and HACA (media regulatory authority).

Screenshot of the DarkForums thread

What was published

The post offers a download of email addresses for the four organizations. No counts or additional fields are specified in the announcement.

Risks for affected individuals

  • Institutional email addresses enable targeted phishing against media and telecom staff.
  • Contact lists can support social engineering campaigns.

What remains unknown

  • The number of email addresses per organization.
  • The source of the lists (scraping, breach, or other).
  • Whether the organizations have responded.

What affected people should do

Employees of 2M, IAM, IRES and HACA should be alert to phishing emails referencing their organizations and report suspicious messages to their IT security teams.

Sources

  • https://darkforums.ru/Thread-DATABASE-MOROCCO-4-Moroccan-Companies-2M-IAM-IRES-HACA