Cadi Ayyad University: Breach Report
Cadi Ayyad University
Overview
A post on DarkForums.as claims to leak student records from Cadi Ayyad University in Marrakech, one of Morocco's major public universities. The seller describes 270 records offered for free, with fields including full names, CIN, CNE, APOGEE, photos, and contact details.
What was published
The post includes a sample record in JSON form showing identity and academic fields. The data profile suggests a university information system export rather than a general contact list.
- Full name in French and Arabic
- CIN (national identity card number)
- CNE and APOGEE academic identifiers
- Date and place of birth, gender
- Email and phone
- Student photo (base64 image included in the sample)
The volume is modest at 270 records, but the presence of identity numbers and photos raises the risk profile.
Risks for affected individuals
National identity numbers, academic IDs, emails, phones, and photos together enable targeted identity misuse, document fraud, and phishing aimed at students. Because the records are Moroccan national IDs, misuse could affect official procedures.
What remains unknown
- Whether the 270 records are a sample of a larger dataset
- How the university systems were accessed
- Whether the data is current or historical
- Any confirmation from Cadi Ayyad University
What affected people should do
Students who may be affected should monitor for phishing that references their university details and report identity-document misuse. Cadi Ayyad University should investigate the claim, review access controls on its records, and notify affected students and the relevant data protection authority.