The Tawtik platform, at the center of a major leak of land and property data in June 2025, has since undergone a major security overhaul.
Since taking over as president of the National Council of Notaries, Adil El Bitar says he has made cybersecurity one of his main priorities, including a key decision to end the electronic archiving of deeds on the platform.
The issue came up during El Bitar’s appearance on Grand Format-Le360. More than a year after the cyberattack exposed thousands of documents related to notarial transactions, the council president said the platform has been operating without any further incident and that a new monitoring system has been put in place.
On June 2, 2025, a group of hackers calling itself Jabaroot published a large volume of stolen data. The leaked files included documents related to property and land transactions, notarial deeds and other sensitive records.
On June 6, 2025, the General Directorate for Information Systems Security (DGSSI) determined following an investigation that the leaked data came “exclusively from the tawtik.ma platform operated by the National Council of Notaries.”
It also confirmed that the systems of the National Agency for Land Conservation, Cadastre and Cartography (ANCFCC) had not been compromised. Tawtik was taken offline to address the vulnerabilities that had allowed the data to be extracted.
This is the context in which El Bitar describes the measures taken since he became president of the National Council of Notaries in June 2025.
“Since I was appointed president of the Council in June 2025, this has been the main area I have worked on,” he said.
“We took important measures to strengthen Tawtik’s security, including ending electronic archiving on the platform,” he added.
The move is intended to redefine the platform’s role. Tawtik is no longer meant to serve as a centralized repository for notarial deeds and contracts, but rather as a tool for completing the various administrative procedures linked to transactions.
“We decided that Tawtik should now simply be a tool for carrying out the formalities related to contracts handled by notaries, whether with the General Directorate of Taxes or the ANCFCC, in order to reduce the risk of documents being leaked,” El Bitar explained.
Under the new approach, responsibility for storing the deeds now rests with individual notaries.
“We have ended the archiving of documents on the Tawtik platform. Until now, the data was stored by a national operator. We decided that this responsibility should now fall directly on the notaries,” the council president said.
Each notary must therefore determine how their documents will be stored, whether through physical archiving or electronic storage.
The change is one of the main lessons drawn from the 2025 incident. By limiting the concentration of sensitive documents on a single platform, the council aims to reduce the potential impact of another security breach.
Read also : PAM promises bigger fuel buffer as El Bitar pins current shortfall on Akhannouch
An audit to identify vulnerabilities
Ending electronic archiving was only part of a broader effort by the council to strengthen the security of its information systems.
According to El Bitar, an initial assessment was carried out by “a company recognized at the national level” to identify weaknesses and vulnerabilities in the system.
“The company conducted an assessment of the weaknesses affecting the platform and the information system. Following this evaluation, we prepared terms of reference,” he said.
More than a year after the attack, El Bitar said the platform is now operating normally.
“Today, this problem no longer exists with Tawtik. The service has been running for a year and a half without any incident,” he said.
The council has also introduced a monitoring system designed to detect possible intrusion attempts in real time.
Regular reports are now produced, while a specialized company has been appointed to support the council in monitoring cybersecurity. The institution also says it has strengthened its human resources by recruiting staff dedicated to these operations and to preventing cyberattacks.
For El Bitar, the Tawtik case goes beyond the notarial profession. He sees it as part of the broader issue of Morocco’s digital sovereignty and its ability to protect critical infrastructure and sensitive data.
The issue also features in the election program of the PAM, to which El Bitar, a member of the party’s political bureau, contributed. The program calls in particular for stronger digital infrastructure and connectivity, as well as greater national capacity for secure data storage.
