Université Hassan II: 900,000-line SQL database shared on DarkForums

Overview

On May 3, 2025, DarkForums user Shinchan, a TRUSTED SELLER-ranked member with 88 posts, shared an SQL database described as the user database of Université Hassan II de Casablanca, hosted under the fda.ma domain. The post states the database contains 900,000 lines and provides a public download link.

What was published

The thread shares a SQL file covering the university's user accounts, with the volume stated as 900,000 lines. The download was hosted on an anonymous file service at the time of posting. No column structure or sample rows were included in the visible part of the thread.

Risks for affected individuals

Students, staff and users of the university's online services could face credential attacks if their accounts and passwords are in the dump. Email addresses linked to the university can be used for targeted phishing.

What remains unknown

• Université Hassan II has not publicly commented
• The exact contents of the SQL file were not visible in the thread
• It is unclear whether passwords were hashed

What affected people should do

University students and staff should change passwords for university portals and any other services using the same credentials. Enabling two-factor authentication on email accounts is recommended.