enssup.gov.ma Data Leak Claimed by EternalRed

Overview

On 25 October 2025, a DarkForums user using the handle EternalRed announced the breach of enssup.gov.ma, the portal of the Moroccan Ministry of Higher Education, Scientific Research and Innovation. The post includes a download link for the claimed data.

What was published

The post provides a compressed download (enssup.gov.ma.zip) hosted on a file sharing service. The website serves students, educators and researchers with academic program and admission information.

Risks for affected individuals

• Portal data may include student and educator records.
• Academic program data could be used in targeted phishing.
• Ministry system access raises concerns of further intrusion.

What remains unknown

• The content and volume of the downloaded data.
• How the breach was performed.
• Whether the ministry has acknowledged the incident.

What affected people should do

Students and staff using enssup.gov.ma should watch for phishing referencing the portal and report suspicious activity to the ministry.