From the alleged “biggest blow to Moroccan intelligence” to threats over the Ceuta events, the scandal is exposing vulnerabilities that Rabat can no longer easily conceal.
Algeria Gate: What the JabaROOT group claims to have achieved is far more damaging to Morocco than an ordinary cyberattack. The group says it has published data on more than 70,000 people allegedly linked to Moroccan security and intelligence services, while threatening to reveal officials it claims were involved in planning and coordinating the events surrounding Ceuta.
The full authenticity and scope of the files still require independent technical verification. But the allegations have already triggered intense interest in the Spanish press, because they strike at the heart of Morocco’s security establishment and raise uncomfortable questions about Rabat’s activities inside Europe.
According to Spanish reports, the leaked material allegedly includes names, positions, dates of birth, identity numbers, ranks, recruitment dates and, in some cases, banking information. If confirmed, this would be much more than an embarrassing data breach: it could expose the structure, networks and operating methods of key Moroccan security institutions.
The affair is particularly sensitive because the alleged targets include personnel linked to the General Directorate for Territorial Surveillance (DGST) and the General Directorate for National Security (DGSN), both headed by Abdellatif Hammouchi.
From Moroccan Cyberattack to Spanish Security Concern
Spanish newspaper ABC described the development as a new escalation in the cyberwar surrounding Morocco. It reported that JabaROOT had published a database containing tens of thousands of alleged members of Moroccan intelligence and police services.
But the most explosive element is the group’s threat to publish the names of those it claims coordinated the Ceuta operation.
The group has also accused senior figures close to the Moroccan royal palace of involvement in planning actions designed to put Spain under pressure. Among the names mentioned is Fouad Ali El Himma, a powerful adviser to King Mohammed VI. At the same time, the group reportedly excluded the king himself from prior knowledge of the alleged operation, directing the accusations instead toward figures surrounding the palace.
The Objective went further, reporting that the group claimed to have exposed 70,381 presumed agents, including senior intelligence officials, alongside sensitive information contained in several electronic files.
Meanwhile, El Confidencial described the episode as potentially “the biggest blow ever dealt to Moroccan intelligence.” Previous leaks attributed to JabaROOT reportedly contained accurate information, although that does not by itself establish the authenticity of every newly published file.
Ceuta: The Most Dangerous Part of the Story
The Ceuta dimension is what turns the scandal into a potentially explosive Spanish-Moroccan affair.
JabaROOT claims that the mass movement of Moroccans toward Ceuta was not simply the result of uncontrolled migration or a temporary failure of border management, but part of a broader operation allegedly prepared inside Morocco.
The group has threatened to publish the identities of Moroccan security personnel it says coordinated the operation, as well as alleged mission orders concerning agents who moved to Fnideq before and during the events.
If those documents are independently authenticated, the consequences would be enormous. Spain would not merely be confronting another Moroccan data breach; it would have to confront allegations that its own border environment was deliberately used as a tool of political pressure.
That raises a question Madrid has long preferred to handle cautiously: can Spain continue to rely so heavily on Morocco to manage migration and border security while ignoring the leverage that dependence gives Rabat?
The alleged leak does not, by itself, prove that Morocco orchestrated the events. But it has reopened precisely the question that the Spanish authorities would rather keep closed.
The “Impenetrable” Moroccan Security Machine Takes a Hit
For years, Rabat has carefully cultivated the image of an exceptionally capable security apparatus; one that Europe relies upon in the fight against terrorism, organized crime and irregular migration.
The JabaROOT affair strikes directly at that image.
If tens of thousands of sensitive records really escaped from Morocco’s security institutions, the damage would extend well beyond exposed names. Intelligence structures, recruitment networks, administrative links and operational relationships could potentially be compromised.
The Objective characterized the alleged breach as deep and extensive, while highlighting the appearance of information concerning senior security officials.
Still, Spanish reporting has also exercised some caution. Being listed in a security database does not automatically make someone an intelligence operative, and the publication of a genuine sample does not prove that the entire database of 70,000 names is authentic.
But that distinction does little to erase the central problem: someone appears to have obtained and published sensitive information connected to the Moroccan security apparatus.
And Rabat has yet to provide a convincing public explanation that settles the question of how such information could have escaped.
From Pegasus to JabaROOT
The scandal also inevitably revives the Pegasus affair.
Spanish authorities previously confirmed that the phones of Prime Minister Pedro Sánchez and senior ministers had been compromised by Pegasus spyware. Although Morocco denied involvement and Spanish investigations have not established judicially that Rabat was responsible, suspicions surrounding the affair never fully disappeared.
The JabaROOT allegations do not prove Morocco’s involvement in Pegasus either. But by bringing espionage, surveillance and Moroccan intelligence activity back into the Spanish media spotlight, they have reopened an old political wound.
The stakes go beyond personal privacy. Any evidence of foreign intelligence operations inside Spain would inevitably raise questions about sensitive files such as Western Sahara, Ceuta, Melilla, migration and Madrid’s relations with Rabat.
An attempt to export the accusation toward Algeria
Faced with the leaks, Moroccan authorities have reportedly sought to attribute JabaROOT’s activities to Algeria, continuing a familiar pattern in which Rabat attempts to externalize damaging security crises.
Spanish media, however, have not treated that claim as established fact.
Reports citing cybersecurity specialists and intelligence sources have raised doubts about the Algerian hypothesis and pointed instead to the possibility of an insider with knowledge of Morocco’s security system, or even an internal struggle within the apparatus.
That uncertainty matters.
Instead of shifting the spotlight toward Algeria, the accusations have left the more uncomfortable question unanswered: how did such sensitive information allegedly escape Morocco’s most powerful security institutions in the first place?
The burden of proof remains with those making the accusation.
A Crisis of Confidence for Morocco
The real damage to Morocco may therefore extend far beyond the leaked files.
For years, Rabat has presented itself to Europe as an indispensable security partner and a reliable gatekeeper against migration and terrorism. But the JabaROOT affair is putting another image before European audiences: that of a security system allegedly vulnerable to major internal penetration and accused of conducting controversial activities beyond Morocco’s borders.
Not every allegation made by JabaROOT has been proven. But the scandal has already achieved something significant: it has placed Morocco’s intelligence apparatus under an unusually intense European microscope.
If the documents concerning Ceuta are authenticated, Spain could face evidence of an extraordinary attempt to use security and migration pressure against its own territory. If they are not, the scale of the alleged breach would still expose serious questions about the protection of Moroccan security data.
Either way, Rabat faces a difficult problem.
The issue is no longer simply whether 70,000 names were leaked. It is whether Morocco can still maintain the image of an impenetrable security apparatus while its alleged internal data, intelligence networks and cross-border activities are being dragged into the public arena.
And that may be the most damaging part of the JabaROOT affair: the scandal has moved from Moroccan servers to the heart of the European debate over trust in Rabat.
