Cyberattack on CNDP website prompts heightened vigilance

Tuesday 11 March 2025 - 11:10

By: Dakir Madiha

Cyberattack on CNDP website prompts heightened vigilance

The website of the National Commission for the Protection of Personal Data (CNDP) has recently been targeted by suspicious activities. A Google search for the commission's official site reveals unwanted content written in an East Asian language.

In a statement received by lareleve.ma, the CNDP confirmed that these unwarranted publications stem from a vulnerability in an outdated WordPress plugin used to manage its website.

However, the institution clarified that this situation does not affect the security of the data it oversees, as its website operates independently from its internal information system. A request for reindexing has been submitted to Google to eliminate traces of this anomaly.

Moreover, the CNDP is facing a Distributed Denial of Service (DDoS) attack, specifically a series of scans that may signal a larger offensive. While this attack does not directly target the CNDP, technical teams and relevant stakeholders are mobilized to bolster the website’s protection and implement necessary measures.

In light of these digital threats, the CNDP reaffirms its commitment to ensuring the security of its infrastructure and maintaining a website compliant with the highest cybersecurity standards.

About the CNDP:

Established in 2009, the CNDP oversees the enforcement of Law 09-08 concerning the protection of personal data in Morocco. It operates under Article 24 of the Moroccan Constitution, which guarantees every individual the right to privacy.