Distamed Morocco: patient and client data claimed breached

Overview

In late July 2026, a DarkForums user named anisanas2, holding V.I.P rank, announced a data breach at Distamed, a Moroccan medical devices and healthcare solutions company. The post claims extraction of the full client list, patient records, internal files, billing documents, invoices and document scans, including archives dating back to the company's founding in 2013. The claim was also flagged in threat-intelligence posts on X.

What was published

According to the post, the extracted data includes:

• Patient last name, first name, phone number and address
• Age and date of visit
• CIN (national ID number)
• Billing documents and invoices
• Records of dealings with government institutions, including military hospitals

The poster says the archive covers the company's operations since 2013.

Risks for affected individuals

Patient records combined with national ID numbers create a high risk of identity theft and insurance fraud. Health-related data is sensitive, and its exposure can be used in targeted extortion or phishing. Staff and partner contacts may also be affected.

What remains unknown

The total number of patients is not disclosed, and no public sample has been released. Distamed has not published a statement. It is unclear whether the data has been sold or retained for negotiation.

What affected people should do

Distamed patients should watch for suspicious messages referencing their medical history, monitor for misuse of their identity documents, and report any confirmed exposure to the company and the Moroccan data protection authority.