leak
Potential
Morocco (MA)
media
Email Lists of Four Moroccan Organizations Leaked
2M, IAM, IRES and HACA (Morocco)
Company2M, IAM, IRES and HACA (Morocco)
Domainhaca.ma
CountryMorocco (MA)
Sectormedia
Breach date2026-05-05
People affected150,000
Data typesNot disclosed
Overview
On 5 May 2026, a DarkForums user shared email address lists described as belonging to four well-known Moroccan organizations: 2M (television network), IAM (Maroc Telecom), IRES (strategic studies institute) and HACA (media regulatory authority).

What was published
The post offers a download of email addresses for the four organizations. No counts or additional fields are specified in the announcement.
Risks for affected individuals
- Institutional email addresses enable targeted phishing against media and telecom staff.
- Contact lists can support social engineering campaigns.
What remains unknown
- The number of email addresses per organization.
- The source of the lists (scraping, breach, or other).
- Whether the organizations have responded.
What affected people should do
Employees of 2M, IAM, IRES and HACA should be alert to phishing emails referencing their organizations and report suspicious messages to their IT security teams.
Sources
- https://darkforums.ru/Thread-DATABASE-MOROCCO-4-Moroccan-Companies-2M-IAM-IRES-HACA