> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Morocco Investment Ministry Data Claim Includes 150,000 Folders and Records on 50,000 Investors
- URL: https://darkwebinformer.com/morocco-investment-ministry-data-claim-includes-150-000-folders-and-records-on-50-000-investors/
- Published: 2026-10-02T19:09:44.000Z
- Updated: 2026-10-02T19:09:44.000Z
- Author: Dark Web Informer
- Tags: Data Breaches

Data Exposure Report ![Morocco flag](https://flagcdn.com/w20/ma.png)Morocco Government Administrative & Investor Data For Sale Unverified 

## Morocco Investment Ministry Data Claim Includes 150,000 Folders and Records on 50,000 Investors

Claimed folders150K+

Claimed investors50K+

Claimed size400+ GB

PriceMake an offer

Severity HIGH 

### Overview

An actor using the handle **"anisans2"** claims to be selling data associated with Morocco's **Ministry of Investment, Convergence and Evaluation of Public Policies (MICEPP)**. The actor describes the material as including administrative documents, authorization records and national ID-related data.

The listing claims more than **150,000 folders** containing multiple files, along with data relating to more than **50,000 investors**. The actor says the material includes Moroccan companies and public institutions and claims the full dataset exceeds **400 GB**. Samples of documents and dataset content are advertised, while the full material is offered for sale either in whole or in parts. **The dataset, its source, the stated volumes and the actor's possession of the full material have not been independently verified.**

### Post details

OrganizationMinistry of Investment, Convergence and Evaluation of Public Policies (MICEPP)

Country![Morocco flag](https://flagcdn.com/w20/ma.png)Morocco

SectorGovernment / public administration

Actor"anisans2"

Claimed foldersMore than 150,000

Claimed investor recordsMore than 50,000

Claimed sizeMore than 400 GB

Listing termsFor sale; offers accepted; available in parts

### What the post claims

- More than 150,000 folders extracted
- Multiple files contained within the folders
- Administrative documents included
- Authorization documents included
- National ID-related data included
- Data concerning more than 50,000 investors
- Moroccan companies included
- Public institutions included
- More than 400 GB of data claimed
- Sample documents advertised
- Sample dataset content advertised
- Full dataset offered for sale
- Seller accepts offers
- Dataset can allegedly be purchased in parts

The actor specifically names several organizations and institutions as examples of entities represented in the material. The screenshot does not provide enough underlying sample content to independently confirm those references or determine how records are distributed across the claimed 400+ GB dataset.

Sponsored

[ ![WhiteIntel, dark web exposure monitoring](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/08/whiteintel_io_banner.jpg) ](https://whiteintel.io/?utm%5Fsource=darkwebinformer.com&utm%5Fmedium=referral&utm%5Fcampaign=whiteintel) 

### Screenshots

[ Screenshot 1Source screenshot ![Listing claiming data associated with Morocco's Ministry of Investment, Convergence and Evaluation of Public Policies, including more than 150,000 folders, records on more than 50,000 investors and over 400 GB of material](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/10/4358792435786235987629387659876235.png) ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/10/4358792435786235987629387659876235.png) 

The supplied capture shows the actor's claims regarding more than 150,000 folders, records relating to more than 50,000 investors, administrative and national ID-related material, a dataset exceeding 400 GB, sample availability, sale terms and contact channels.

### IOCs & contact identifiers

Identifiers directly visible in the listing. These support correlation and do not independently verify the dataset claim or identify the person operating the account.

| Type             | Identifier            | Source       |
| ---------------- | --------------------- | ------------ |
| Actor handle     | anisans2              | Screenshot 1 |
| Telegram channel | @pka291channel        | Screenshot 1 |
| Telegram backup  | t\[.\]me/pka291backup | Screenshot 1 |

No Tox ID, Session ID, malware hash, attacker-controlled domain or attacker-controlled IP address is visible in the supplied material. Personal or government identifiers that may be contained in the purported evidence are not included in this table. URLs to any data will always be blurred out, but are available for subscribers on the threat feed or ransomware feed.

### Mapped techniques

**Claimed** identifies behavior explicitly described by the actor. **Inferred** identifies an analytical mapping supported by the supplied material. Neither label means the activity has been independently verified.

- Collection [T1213.006](https://attack.mitre.org/techniques/T1213/006/) [Data from Information Repositories: Databases](https://attack.mitre.org/techniques/T1213/006/) Inferred The actor claims to have extracted a large collection of structured investor information alongside administrative documents and authorization records. The supplied material does not disclose the acquisition method or independently establish unauthorized access to MICEPP systems.

### Potential impact

If authentic, the claimed material could expose **administrative documents, authorization records, national ID-related information and investor data** involving Moroccan companies, public institutions and individuals. Depending on the underlying content, the material could support identity fraud, targeted phishing, impersonation, business-email compromise or intelligence gathering against organizations represented in the dataset.

### Status Unverified

Dark Web Informer has **not independently verified** the dataset's authenticity, source, 150,000+ folder count, 50,000+ investor count, 400+ GB size, current availability or the actor's claim that the material contains records associated with the organizations named in the listing. The supplied screenshot documents the claim and sale offer, not the full dataset itself.

Want everything on this threat? **Paid subscribers** get the full unredacted claim details and more. After subscribing, check out the [threat feed](https://darkwebinformer.com/threat-feed/?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=micepp-data-listing-2026-10-02&utm%5Fcontent=threat-feed) and search there for this alert.

[View pricing →](https://darkwebinformer.com/pricing?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=micepp-data-listing-2026-10-02&utm%5Fcontent=pricing-button) 

[Dark Web Informer](https://darkwebinformer.com/?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=micepp-data-listing-2026-10-02&utm%5Fcontent=footer)