A threat actor using the alias NetworkBrokers has allegedly leaked internal documents belonging to the Moroccan Ministry of Culture. The breach, posted on a cybercrime forum, reportedly includes sensitive government-related files.
According to the post, the attacker claims to have gained unauthorized access to systems belonging to the Ministry, exfiltrating internal documents. A sample was shared to validate the claim, though the full extent of the breach remains unverified.
The leak allegedly contains:
- Internal ministry communications
- Confidential government documents
- Administrative files
At this time, there is no confirmation from Moroccan authorities regarding the incident.
Morocco has witnessed a surge in cyber incidents targeting government bodies in 2025, reflecting broader regional challenges in cybersecurity resilience. Government platforms remain prime targets due to their administrative importance and the potential value of exposed citizen or institutional data.
CyHawk Africa’s View
While the breach remains alleged until confirmed, it highlights once again the urgent need for:
- Improved monitoring and incident response within critical government systems.
- Adoption of zero-trust principles to reduce unauthorized access risks.
- Awareness of insider threats, as internal data continues to be highly sought after by malicious actors.