The Tawtik leak: how Moroccan property documents ended up online, and what it teaches

In June 2025, hackers claimed to have stolen documents from Morocco’s land registry, the ANCFCC. The DGSSI later said the data came from Tawtik, a platform used by notaries. Why the weakest link is often a user’s computer.

On 2 June 2025, the group calling itself “JabaRoot DZ”, already behind the CNSS leak two months earlier, claimed on Telegram that it had stolen property documents from Morocco’s land registry agency, the ANCFCC. It published samples and announced very large volumes of data.

What happened

• The ANCFCC denied any breach of its own information systems.
• On 6 June 2025, the DGSSI, Morocco’s national cybersecurity authority, said the data came from Tawtik, a platform used by notaries, and not from the land registry’s systems.
• According to press reports, the attackers reached some documents through computers that were not well enough protected.
• The volumes announced by the hackers have not been publicly verified.

The weakest link is not always the central system

A platform can be well protected and still leak data through the devices of the people who use it. When a professional logs in from a computer infected with malware, or with a reused password, the attacker inherits their access.

What platforms and their users can do

• Require two-factor authentication for every professional account, especially those that reach sensitive documents.
• Limit what each account can download, and alert on unusual volumes.
• Keep users’ computers updated, with active protection against malware.
• Never reuse a work password on another service.

A reaction worth noting

On 20 June 2025, the ANCFCC launched an international tender for a security audit of its information system. Auditing before the next incident, rather than after, is exactly the right reflex.

Your security is only as strong as the least protected computer that can log in.

Sources: DGSSI statement of 6 June 2025 as reported by H24info, Médias24, Le360, Morocco World News.

Building a platform or a client portal? Tell us about your project through our estimate form: we will reply with an estimate and the next steps.