ransomware
Credible
Morocco (MA)
education
Universite Sidi Mohamed Ben Abdellah (USMBA) listed by the GDLockerSec ransomware group
Universite Sidi Mohamed Ben Abdellah (USMBA)
CompanyUniversite Sidi Mohamed Ben Abdellah (USMBA)
Domainusmba.ac.ma
CountryMorocco (MA)
Sectoreducation
Breach date2025-01-24
People affected150,000
Ransomware groupGDLockerSec
Data typesacademic records, student data, administrative information
Overview
The GDLockerSec ransomware group has listed Université Sidi Mohamed Ben Abdellah (USMBA), a public university in Fez, Morocco, on its leak site. The group's post references a data size of 8 MB. The listing appeared on 24 January 2025. At the time of analysis, the group's leak page was not reachable.
What was published
The group claims to have exfiltrated approximately 8 MB from the university. The archive is expected to include academic records and administrative information.
Risks for affected individuals
- Students' academic data may be exposed.
- Administrative records could be misused.
- Staff information may be included.
What remains unknown
- The composition of the 8 MB archive.
- The exact contents of the leak.
- Whether the data has been published elsewhere.
What affected people should do
Students and staff should monitor their accounts and be alert to phishing referencing the university. USMBA should notify affected individuals, review compromised systems, and coordinate with Moroccan authorities.
Sources
- http://igziys7pres4644kbrtakxfbrwkyld64nxk5prpkgtcexwrrjgtfjzyd.onion/284bddb7-1ae9-48d1-b5d1-370e4a308575/