CNOPS: a claimed data leak, and how to react when the facts are not yet confirmed

In April 2026, hackers claimed to have published data on more than three million CNOPS members. The leak had not been confirmed when it was announced. How a business should react to a claimed breach.

On 8 April 2026, the group “JabaRoot DZ” published on Telegram a file presented as coming from the CNOPS, the fund that covers health insurance for many public-sector employees in Morocco. According to the claim, it contained data on more than three million members.

What was claimed

• Names, member registration numbers and personal addresses, according to the press.
• No official confirmation of the authenticity or the real scale of the data had been given when the claim was reported.
• The CNDP, Morocco’s data protection authority, said it had opened an inquiry.

An important point: publication is not intrusion

The CNDP’s president recalled that in the CNSS case, the data was published in April 2025 while the intrusion dated back to late 2024. A leak can therefore be announced months after it really happened. He also said that, in the CNOPS case, there seemed to be more of a political agenda than a confirmed technical intrusion.

How to react to a claimed breach

• Do not panic, but do not wait for confirmation to warn your team about scams.
• Check access logs going back several months, not just the last few days.
• Change the passwords of accounts that can reach sensitive data, and turn on two-factor authentication.
• Communicate simply: what you know, what you do not know yet, and what people should watch for.

For the people concerned

Whether or not the file is authentic, it can fuel phishing. Be wary of messages that quote your member number or address to ask for a payment or a password.

A leak claim is already a risk: the scams do not wait for official confirmation.

Sources: TelQuel, Le360, Afrik.com, April 2026.

Want a website that collects only the data it needs? Tell us about your project through our estimate form: we will reply with an estimate and the next steps.