Search Ransomware Intelligence
Jump to a group, country, industry or search victims.
MA · #51 of 183 countriesWatch Morocco
Ransomware Attacks In Morocco.
As of Oct 19, 2026, 40 organisations in Morocco have been listed as ransomware victims on leak sites, 0.1% of all confirmed victims and rank 51 of 183 countries. The most active group here is APT73.
Updated continuously · figures as of Oct 19, 2026- Confirmed victims
- 40
- Share of all victims
- 0.1%
- Rank
- #51 of 183
- Most active group
- APT73
- Most hit sector
- Education and Research
Victims Posted Per Month.
1
0
0
1
3
3
0
1
2
1
2
1
| Month | Confirmed victims |
|---|---|
| November 2025 | 1 |
| December 2025 | 0 |
| January 2026 | 0 |
| February 2026 | 1 |
| March 2026 | 3 |
| April 2026 | 3 |
| May 2026 | 0 |
| June 2026 | 1 |
| July 2026 | 2 |
| August 2026 | 1 |
| September 2026 | 2 |
| October 2026 (month in progress) | 1 |
Most Active Groups Here
Latest Victims.
All 40 victims in Morocco →| Victim | Claimed by | Country | Industry | Data claimed | Posted |
|---|---|---|---|---|---|
| CNESTEN cnesten.org.ma | Qilin | MAMorocco | Government and Public Sector | Not stated | |
| pharma5.ma pharma5.ma | INC Ransom | MAMorocco | Healthcare | 50 GB | |
| lasultanahotels.com lasultanahotels.com | Krybit | MAMorocco | Unknown | 41 GB | |
| Avanta Maroc Ex Adecco avanta.ma | The Gentlemen | MAMorocco | Consulting | Not stated | |
| Brazer Ingenierie brazeringenierie.com | Arcus Media | MAMorocco | Telecommunications | Not stated | |
| Eurodefi eurodefis.com | Qilin | MAMorocco | Financial Services | Not stated | |
| mupras.com mupras.com | Krybit | MAMorocco | Insurance | Not stated | |
| planetsport.ma planetsport.ma | LockBit 5.0 | MAMorocco | Retail | Not stated |
Know When A Company In Morocco, Or One Of Your Suppliers, Is Posted.
Brandefense alerts on leak-site posts for your brands and third parties, with the group's profile and IOC feeds.