A notorious threat actor known as Jabaroot has allegedly leaked a massive database containing personal information of over 100,000 Moroccan Auxiliary Force agents. The disclosure was posted on a dark web forum, with the actor claiming it was in retaliation for what they described as “violent crackdowns on peaceful youth protests” in Morocco.
According to the post, the leaked dataset is said to include details of auxiliary personnel, and the actor has threatened to release more information if the Moroccan authorities “continue their campaign of arrests.”
The message, which was written in both English and Arabic, referenced alleged corruption among senior Moroccan officials and accused security forces of using excessive force against citizens. Jabaroot further claimed to possess over 7 terabytes of data belonging to the DGSN (General Directorate for National Security) and DGST (General Directorate for Territorial Surveillance).
While CyHawk Africa could not independently verify the authenticity of the files, this claim continues a growing trend of politically motivated leaks and hacktivist activity targeting North African government institutions in 2025.
The alleged breach comes amid increasing tensions between Moroccan and Algerian cyber actors. Multiple hacktivist groups have been launching defacement campaigns, data leaks, and DDoS attacks in what appears to be a digital extension of ongoing geopolitical disputes.
Jabaro0t, who has been active since mid-2024, is known for data leaks related to government corruption, police misconduct, and alleged political cover-ups within Morocco. The actor has previously shared screenshots of stolen databases, government emails, and identity records.
Disclaimer: This report is based on open-source intelligence (OSINT) and dark web monitoring. CyHawk Africa has not independently verified the authenticity of the claimed data. The report is intended solely for cybersecurity awareness and situational intelligence purposes.