Qilin Claims Ransomware Attack on Morocco’s CNESTEN

Summary
Qilin claims it targeted Morocco’s CNESTEN, with reported disruption and potential data compromise. The monitoring post says the claim has not been independently confirmed.
Key points
- Qilin is the actor named in the claim against CNESTEN, a Moroccan government and defense organization.
- The monitored claim was published on October 11, 2026, and links to a post on Qilin’s site.
- The post describes disruption and potential data compromise, but these effects are not independently confirmed.
- The monitoring source says it would share an official statement from CNESTEN if one becomes available.
Article Details
- Victim
- CNESTEN
- Claim Date
- 2026-10-11
- Exfiltration Status
- Potential data compromise is reported, but exfiltration is unconfirmed.
- Leak Status
- The claim is attributed to qilin; publication of victim data is not reported.