Al Barid Bank: Morocco’s Al Barid Bank Denies Data Breach, Says Customer Accounts Remain Secure

Al Barid Bank Denies Major Data Breach Amid Dark Web Leak Claims

Morocco’s Al Barid Bank has moved to reassure customers following reports of a potential data leak, stating that its systems remain secure and no sensitive information has been compromised. In a statement released on Sunday, the bank confirmed that initial investigations found the allegedly leaked data to be non-sensitive, with no risk to customer accounts or payment cards.

The incident surfaced after a dark web post on April 19, 2026, claimed that a database of financial transaction logs tied to the bank had been obtained and put up for sale. The dataset reportedly included 2,025 records containing instant transfer details, direct debit transactions, credit card issuance data, branch information, and phone numbers linked to internal identifiers. However, cybersecurity experts note that while the sample data appears structured like banking logs, the claims remain unverified, and the origin or completeness of the dataset is unclear.

Al Barid Bank has stated that its teams are conducting further technical checks to determine the source and nature of the shared information. The bank emphasized its commitment to safeguarding customer data, though experts caution that even non-exploitable transaction data could reveal behavioral patterns, potentially enabling targeted scams.

The incident adds to a growing trend of alleged cyber incidents in Morocco, raising concerns about digital security and public trust in the country’s financial institutions. No official attribution has been made, and the bank maintains that all accounts and payment systems remain fully operational.

Source: https://www.moroccoworldnews.com/2026/04/287841/moroccos-al-barid-bank-denies-data-breach-says-customer-accounts-remain-secure/

Al Barid Bank cybersecurity rating report: https://www.rankiteo.com/company/al-barid-bank

"id": "AL-1776697027",
"linkid": "al-barid-bank",
"type": "Breach",
"date": "4/2026",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'industry': 'Financial Services',
                        'location': 'Morocco',
                        'name': 'Al Barid Bank',
                        'type': 'Bank'}],
 'customer_advisories': 'Public statement emphasizing no risk to accounts or '
                        'payment cards',
 'data_breach': {'data_exfiltration': 'Allegedly sold on dark web',
                 'number_of_records_exposed': '2025',
                 'personally_identifiable_information': 'Phone numbers linked '
                                                        'to internal '
                                                        'identifiers',
                 'sensitivity_of_data': 'Non-sensitive (per bank statement)',
                 'type_of_data_compromised': 'Financial transaction logs'},
 'date_detected': '2026-04-19',
 'date_publicly_disclosed': '2026-04-19',
 'description': 'Morocco’s Al Barid Bank has moved to reassure customers '
                'following reports of a potential data leak, stating that its '
                'systems remain secure and no sensitive information has been '
                'compromised. The incident surfaced after a dark web post on '
                'April 19, 2026, claimed that a database of financial '
                'transaction logs tied to the bank had been obtained and put '
                'up for sale. The dataset reportedly included 2,025 records '
                'containing instant transfer details, direct debit '
                'transactions, credit card issuance data, branch information, '
                'and phone numbers linked to internal identifiers. The bank '
                'confirmed that initial investigations found the allegedly '
                'leaked data to be non-sensitive, with no risk to customer '
                'accounts or payment cards.',
 'impact': {'brand_reputation_impact': 'Potential impact due to public concern '
                                       'over data security',
            'data_compromised': 'Financial transaction logs (instant transfer '
                                'details, direct debit transactions, credit '
                                'card issuance data, branch information, phone '
                                'numbers linked to internal identifiers)',
            'identity_theft_risk': 'Potential for targeted scams due to '
                                   'revealed behavioral patterns',
            'payment_information_risk': 'No risk to payment cards (per bank '
                                        'statement)'},
 'initial_access_broker': {'data_sold_on_dark_web': 'Allegedly'},
 'investigation_status': 'Ongoing',
 'references': [{'date_accessed': '2026-04-19', 'source': 'Dark web post'}],
 'response': {'communication_strategy': 'Public statement reassuring customers',
              'incident_response_plan_activated': 'Yes',
              'remediation_measures': 'Technical checks to determine the '
                                      'source and nature of the shared '
                                      'information'},
 'stakeholder_advisories': 'Reassurance statement to customers',
 'title': 'Al Barid Bank Denies Major Data Breach Amid Dark Web Leak Claims',
 'type': 'Data Leak'}