Morocco Ministry of Islamic Affairs and Awqaf candidate database leaked on DarkForums

Overview

A dataset described as belonging to Morocco's Ministry of Islamic Affairs and Awqaf, the Ministere des Habous et des Affaires Islamiques, has been posted on DarkForums. The thread was opened on 9 October 2026 by the member Nameless511 and presents the candidate register of an "Ingenieur d'Etat" recruitment examination at first grade.

What was published

The post states that the register holds 109,683 rows and that the material is formatted as CSV and XLSX files with PDF attachments, in Arabic and French. The fields named in the post are:

• Full name in Arabic and Latin script
• National identity card (CIN) number
• Date and place of birth, and gender
• Full address, postal code and city
• Mobile and landline numbers
• Email address
• Diploma name, specialisation, awarding institution and year of graduation
• Application status, whether accepted or rejected, and the rejection reason
• Examination centre
• Uploaded supporting documents such as diploma, identity card and application file

A block of sample rows is pasted into the thread as a CSV extract with Arabic column headers covering the serial number, family name, first name, identity number, birth data, address, contact details and diploma information.

Risks for affected individuals

• A national identity number linked to a full address and a phone number is enough to impersonate an applicant or open accounts in their name.
• Rejection reasons and uploaded documents add sensitive administrative context about each person.
• Applicants are a large and reachable group for phishing that quotes their exam status.

What remains unknown

• Whether the dataset is genuine and complete. The rows shown were not checked against ministry records.
• How and when the data was taken. No breach date is given in the post.
• Whether the material has already been sold or shared.
• Whether the ministry has been informed or has commented.

What affected people should do

• Treat messages that reference an application or an examination result with suspicion.
• Contact the ministry to ask whether their application data was held in the affected system.
• Watch for identity fraud and report it to the local authorities.