Hassan II University Casablanca student data breach claimed

Overview

A DarkForums thread from 9 August 2025 claims that univh2c.ma, the portal of Université Hassan II de Casablanca in Morocco, was breached. The poster says a text file contains more than 16,000 lines of student data and that an additional spreadsheet holds full records of more than 1,000 students.

What was published

The thread lists fields such as student ID, names, national ID (CIN), dates, and academic details including baccalaureate type, year, and mention. A sample line showing a student's name and degree is included. This is a separate event from the larger database offer shared on the same forum in May 2025.

Risks for affected individuals

Student records combining national ID numbers, addresses, phone numbers, and academic history are valuable for identity fraud. The national ID field in particular increases the risk of impersonation.

What remains unknown

The total number of students affected and the full field list are not fully confirmed. Whether the dataset includes contact details for all 16,000 lines is unclear, and the university has not publicly responded.

What affected people should do

Students of Hassan II University should monitor for identity misuse and change passwords on university services. They should be alert to phishing messages that reference their academic data.