A recent cyberattack targeting Office of Vocational Training and Employment Promotion exposed the personal data of about 100,000 users through its “MyWay” guidance platform.
The breach adds to a series of cyberattacks that have targeted Moroccan institutions, including the Ministry of Economic Inclusion, Small Business, Employment and Skills, as well as the National Social Security Fund.
What we know
The attack occurred April 12 and was claimed by a threat actor identified as “anisanas2,” according to cybersecurity firm VECERT Analyzer. It affected only the OFPPT’s “MyWay” platform and did not compromise the institution’s other information systems.
The breach exposed personal data belonging to approximately 100,000 users, the agency confirmed. These individuals had used the platform to access training information and complete a vocational aptitude test before registering.
Leaked data
According to an OFPPT statement, the exposed information includes personal details entered during account creation, such as full name, phone number, national ID number and email address. No supporting documents were uploaded.
The agency noted that some of the data may be inaccurate or incomplete, as it was self-reported by users.
The breach is limited to account creation and self-assessment functions. It does not include training records, academic results or career plans.
While the official statement did not specify the number of affected centers, VECERT Analyzer estimates the data could relate to about 500 training centers across Morocco. It may also include academic background details, such as fields of study — including IT, mechanics, tourism and construction — and diploma levels.
OFPPT said initial technical analysis suggests the incident may have involved the fraudulent use of a compromised legitimate account. At this stage, there is no evidence of a direct breach of the guidance system itself.
add your comment
Terms of publication : Not to offend the writer, people, sacred things, or attack religions or the divine self, and refrain from racist incitement and insults.