Marjane Group listed by the Stormous ransomware group

Overview

The Stormous ransomware group has listed Marjane Group, the largest retail company in Morocco, on its leak site. Founded in 1990, the group operates Marjane hypermarkets and Marjane Market supermarkets. The listing appeared on 6 November 2025.

What was published

The group has listed the retailer as a victim but has not published detailed data descriptions at this stage. Retail chains hold customer profiles, loyalty records and payment information, which are the likely contents of any exfiltration.

Risks for affected individuals

• Customer personal data may be exposed.
• Loyalty and payment records could enable fraud.
• Employees' records may be included.

What remains unknown

• Whether data has been exfiltrated.
• The volume of records involved.
• The timeline of any release.

What affected people should do

Customers should monitor payment cards and be cautious of phishing referencing the retailer. The company should notify customers and staff, review compromised systems, and advise password changes for loyalty accounts.