Moroccan public procurement platform database claimed breached

Overview

A DarkForums thread from 5 July 2025 claims that marchespublics.gov.ma, the official Moroccan government platform for public procurement, was breached. The poster says the full database was obtained, with about 35,000 lines and 25,000 documents in CSV and PDF formats.

What was published

The thread lists database fields visible in a sample, including tender references, buyer details, publication and reception dates, execution location, category, and contract articles. The captured page includes an image showing the dataset structure. Public procurement data can reveal contract values, suppliers, and government purchasing patterns.

Risks for affected individuals

While procurement data is largely administrative, it can expose company contact details of bidders and suppliers. Combined with contract values, the information could be used for corporate espionage, fraud, or targeted phishing against businesses.

What remains unknown

The exact contents of the 25,000 documents are not described. Whether personal data of individuals is included is unclear, and the government has not publicly confirmed the breach.

What affected people should do

Companies that bid on Moroccan public tenders should watch for phishing messages referencing their procurement activity. Suppliers should verify the authenticity of any documents claiming to come from the platform.