OFPPT Morocco: student database claimed breached

Overview

In April 2026, a DarkForums user named anisanas2, holding V.I.P rank, posted a database claimed to belong to OFPPT, Morocco's public vocational training institution. The post says the released file contains 100,000 lines, while a full database of more than 400,000 lines is offered for sale. Media coverage, including SearchInform and Yabiladi, reported on the alleged exposure of student records at OFPPT.

What was published

The poster states that OFPPT operates more than 500 training centers and trains over 400,000 students each year across fields including IT, networking, electronics, mechanics and tourism. The claimed database contains student records, and the poster offers the larger dataset for purchase through a Telegram channel.

Risks for affected individuals

Students affected by this exposure may face phishing, identity fraud and credential reuse attacks. Records from vocational training programs can include contact details, registration data and academic information that can be combined with other leaked data.

What remains unknown

The exact fields in the database are not listed, and the number of unique students is not confirmed. OFPPT has not published a public confirmation. It is unclear how the data was obtained and when.

What affected people should do

Current and former OFPPT students should change passwords on any accounts associated with the institution, watch for phishing messages about training programs, and report suspicious contact to OFPPT and the Moroccan data protection authority.