A threat actor operating under the alias B4baYega has published what they claim to be a trove of sensitive data linked to individuals, companies, and government entities in Morocco. The leak was posted on a popular dark web forum and made freely available for download, with the password openly shared.
While the origin of the data remains unclear—even to the threat actor themselves—the post implies that the breach occurred through unauthorized access to an unspecified server. The contents allegedly include personal records and organizational data, though the scope and credibility of the leak have yet to be independently verified.