Morocco investment ministry (MICEPP) claims 150,000 folders and data on 50,000 investors leaked

Overview

On 2 October 2026, a poster using the handle anisanas2 published on DarkForums a claim of a large data theft from MICEPP, the Moroccan Ministry of Investment, Convergence and Evaluation of Public Policies (Ministère de l'Investissement, de la Convergence et de l'Évaluation des Politiques Publiques). The claim was subsequently reported by third-party threat sources including darkwebinformer.com and social accounts on X and Threads.

What was published

The poster claims to have extracted over 150,000 folders containing administrative documents, authorisations and national identity material, together with records of over 50,000 investors. The referenced investors include Moroccan companies and public institutions named as ADM, OFPPT, OrangeAtelier, the Ministry of Tourism and the Ministry of Taxes. A sample was offered publicly, while the full dataset, described as over 400 GB, was offered for sale, purchasable in parts.

Risks for affected individuals

The alleged scope covers government-held business and personal data:

• Administrative documents and authorisations
• National identity material
• Records of investors and companies including public institutions

The combination of investor records and identity documents is sensitive for both corporate entities and the individuals behind them.

What remains unknown

Access and data integrity are not independently confirmed. Only a sample is public, so the true volume and depth of the data, and whether the sale proceeds, remain unknown. The extent to which national identity data is genuinely included has not been verified.

What affected people should do

Investors and representatives of the named Moroccan companies and public institutions should watch for targeted phishing and unsolicited approaches referencing investment or identity documents. The ministry should audit its investment and administrative records and notify affected parties once the scope of the exposure is confirmed.