Pharmacie.ma: 41,772 customer records exported in September 2025 breach

<p>On 16 November 2025, a forum user published to have leaked data belonging to <strong>Pharmacie.ma</strong>, Morocco on a hacking forum. Sample data was published alongside the claim, providing corroborating evidence of the breach.</p> <h2>What the source reveals</h2> <p>A forum user shared a SQL dump of pharmacie.ma, a Moroccan pharmacy information portal.</p> <h2>Risks</h2> <ul> <li>Medical identity theft and insurance fraud using patient records, treatment histories, and diagnoses</li> <li>Violation of patient privacy regulations, potentially triggering mandatory reporting to health authorities</li> <li>Patient safety risks if treatment or medication records were altered or deleted</li> <li>Unauthorised access to sensitive organisational data that could be used for follow-on attacks</li> <li>Competitive intelligence loss if proprietary business information or trade secrets were exposed</li> <li>Reputational damage and erosion of customer, citizen, or stakeholder trust in the affected organisation</li> <li>Legal liability and regulatory fines under applicable data protection frameworks</li> </ul> <h2>What remains unknown</h2> <ul> <li>the total volume of data compromised and whether it includes additional categories beyond those disclosed</li> <li>the method by which the data was obtained - whether through a direct database compromise, an insecure API, or a third-party breach</li> <li>whether the data has been sold or distributed to additional parties beyond the forum post</li> </ul> <h2>Conclusion</h2> <p>This incident confirms that Pharmacie.ma's data has been compromised and is circulating on underground forums. Healthcare data breaches carry particular weight because medical records cannot be changed like passwords. Affected patients should monitor their health insurance statements for fraudulent claims.</p>