The Royal Moroccan Football Federation (FRMF), the governing body for football in Morocco, has allegedly fallen victim to a cyberattack. A threat actor has claimed responsibility for breaching an FTP (File Transfer Protocol) server belonging to the federation and has reportedly released the data. The FRMF is a significant organization within the nation, responsible for managing the country’s national football leagues, national football teams, and is a key player in Morocco’s co-hosting of the 2030 FIFA World Cup and the upcoming 2025 Africa Cup of Nations.
The full scope and specific contents of the compromised data have not yet been officially detailed, but the threat actor’s claim suggests a significant exfiltration of files residing on the federation’s FTP server. These types of servers are commonly utilized for storing and transferring a wide array of file types, which could potentially include sensitive operational documents, administrative records, or personal information. The individual or group claiming responsibility for the breach also indicated that further data related to Morocco might be released in the near future.