A naukri.com initiative
Securityaffairs
1d
189
Image Credit: Securityaffairs
Paraguay Suffered Data Breach: 7.4 Million Citizen Records Leaked on Dark Web
- Resecurity researchers discovered 7.4 million records of Paraguay citizens' personally identifiable information (PII) on the dark web, with cybercriminals demanding $7.4 million in ransom payments.
- The stolen data was offered for sale, with a symbolic deadline set by a ransomware group.
- The leaked data includes PII from different government systems, accusing the country's leadership of corruption and lack of data protection.
- The Paraguayan government refused to pay the ransom and did not provide details on how the data of 7.5 million citizens was compromised.
- The leak is suspected to be from various government institutions, including the National Agency for Transit and Road Safety and the Ministry of Public Health and Social Welfare.
- Past data breaches in Paraguay were noted, including incidents in 2025 involving over 7 million people and sensitive data from public institutions.
- The cybercriminals referred to themselves as 'Cyber PMC' and targeted government systems for profit, raising concerns about potential foreign state involvement.
- The growing number of cyberattacks against Paraguay, possibly linked to Chinese state-sponsored groups like Flax Typhoon, is highlighted.
- No data was leaked in the Flax Typhoon incident, which employed advanced persistent threats to infiltrate systems.
- Paraguay's stance on Taiwan's independence has led to heightened cyber threats, with foreign actors targeting government systems storing citizen PII.
- The trend of increasing cyber threats in South America underscores the need for greater vigilance in safeguarding government information systems and citizen data.
- Flax Typhoon, a cyber-group linked to China, conducted an advanced persistent threat (APT) attack on Paraguayan government networks.
- The Paraguayan government has taken steps to address the cyber threats and emphasized the importance of protecting sensitive information.
- The significant data breach in Paraguay involving 7.4 million citizens signifies a critical cybersecurity incident in the nation's history.
- This incident raises concerns about the vulnerability of government systems and the need for robust cybersecurity measures to safeguard citizen data.
- The extensive scope of the data breach, previous incidents, and potential foreign involvement underscore the urgency for enhanced cybersecurity protocols in Paraguay.
Read Full Article
11 Likes
For uninterrupted reading, download the app