Attackers claim to have leaked about 695,000 records from Morocco's Watiqa.ma civil-document platform

In mid-May 2026 a threat actor posted what it presented as a dump of about 695,000 records tied to Watiqa.ma, the online service Moroccans use to request civil-status documents such as birth certificates. Moroccan and regional outlets reported the claim; no official confirmation from the platform or Morocco's data protection authority (CNDP) has been found.

Confirmed

Two independent outlets reported that the dump was published online; the platform and the CNDP have not confirmed a breach in the sources we found.

Claimed by the attacker

The attacker says the data comes from Watiqa.ma and includes names and civil-status document details. The size and origin of the data are the attacker's claim and remain unverified; it was posted around the same time as several other leak claims against Moroccan organisations.

What to do

Watiqa.ma users: change the account password and do not reuse it on other services.
Expect phishing and document-fraud attempts that quote birth-certificate details; verify any request through official channels.
Follow official notices from watiqa.ma and cndp.ma.

Sources

Dark-web forum post (not linked) · 2026-05-20
moroccoworldnews.com · Jabaroot claims leak of 695K Watiqa.ma civil document records in Morocco · date unknown
medias24.com · Fuite Watiqa.ma: près de 700 000 données d'utilisateurs exposées · date unknown

How we verify stories · A correction? corrections@aswarcyber.com