Morocco ranked third among African countries for recorded cyber-threat events in 2025, behind Nigeria and South Africa, Le360 reports, citing a Mastercard report. Its Cyber Insights platform logged nearly 7,300 events targeting Moroccan organizations over the year, or 10.6% of the 69,236 recorded across the continent, roughly one every eight minutes. Morocco averaged 612 events a month, peaking at 1,882 in April.
Nigeria led with 24.4% of the total, followed by South Africa with 12.6%. Morocco was ahead of Egypt, at 8.8%, and Kenya, at 7.1%; together the four economies account for 54.7% of observed activity.
The report revisits attacks on institutions holding sensitive data. The social security fund, the CNSS, confirmed on 8 April 2025 that its systems had been targeted, exposing personal data of nearly two million people and about 500,000 affiliated companies. On 2 June 2025 a group calling itself Jabaroot claimed an attack on the land registry agency, the ANCFCC, saying it had extracted four terabytes of data.
Across Africa, malware, ransomware, email-based social engineering and reconnaissance together account for 57.6% of events. Cybercrime is professionalizing: of attributed events, 41.5% are blamed on blackhat hackers and 20% on organized criminal groups, while politically motivated actors account for 13.9% and state-backed actors 9.7%. Estimated attacks rose 421.4% between 2016 and 2025, against 307.3% worldwide, and Interpol puts African cybercrime losses at $484m in 2025, up from $192m.
The report also cites a shortfall of more than 200,000 cybersecurity professionals across the continent. Morocco is described as having a structured framework, including the DGSSI, created in 2011 and home to the maCERT, data-protection law 09-08 and cybersecurity law 05-20. Le360 stresses that the number of events alone does not measure how effective these defenses are.
