A digital threat can destabilize an entire security apparatus.
Rabat, Morocco
The anonymous hacking group Jabaroot has threatened to publish information allegedly identifying 70,000 people connected to Morocco’s General Directorate for Territorial Surveillance, the country’s domestic intelligence service. In its latest message, the group presented the potential disclosure as an unprecedented breach of the kingdom’s security structure. Neither the scope nor the authenticity of the purported database has been independently verified. That uncertainty is essential because inclusion in a leaked file would not, by itself, prove that an individual works as an intelligence officer or confidential source.
The warning follows a broader campaign of cyberattacks and politically charged disclosures attributed to Jabaroot against Moroccan institutions. Previous incidents have involved social security records, notarial documents and alleged information about members of the justice system, establishing a pattern in which stolen data and public intimidation reinforce each other. Some earlier breaches were confirmed by Moroccan institutions, while other accusations circulated without sufficient evidence or were denounced as fabricated. The group’s history therefore gives the latest threat credibility as a security risk, but not automatic reliability as a source.
A genuine list containing intelligence personnel, informants or operational contacts could create consequences far beyond reputational damage. Exposed individuals might face surveillance, coercion, retaliation or physical danger, while foreign services could use the material to reconstruct networks and identify relationships. Even a partially false database could be weaponized through selective editing, impersonation and the combination of authentic records with invented allegations. Publicly labeling thousands of people as spies could also endanger ordinary employees, relatives and citizens whose information may have been collected for unrelated administrative purposes.
Moroccan authorities now face two simultaneous challenges: determining whether an intrusion occurred and preventing the hackers’ narrative from becoming accepted as fact before forensic analysis is completed. A credible response would require transparent technical findings, rapid protection for potentially exposed individuals and clear distinctions between verified records and manipulated material. Media organizations and social platforms also carry responsibility because reproducing names or documents without authentication could amplify a hostile information operation. The central issue is no longer merely whether Jabaroot possesses data, but whether uncertainty itself is being used as a weapon against Morocco’s institutional trust.
Facts that do not bend. / Hechos que no se doblan.