Paraguay Health Ministry faces alleged data leak

VECERT issued a preventive alert over the alleged exfiltration and publication of a roughly 10.5 GB database attributed to Paraguay’s Ministry of Public Health and Social Welfare. Its intelligence radar classified the incident as "UNCONFIRMED" and said the warning was based on a .sql.gz download link seen on cybercrime forums.

What did VECERT say about the case?

VECERT said the threat actor identified as "Zumarius" claims to have breached Paraguay’s Health Ministry and released 10.5 GB of data. The alert, published on September 16, 2026, stresses that the authenticity of the information, its sensitivity, and the actual level of compromise affecting institutional servers have not been verified.

The wording is cautious. It does not present the leak as confirmed, but as an alleged publication detected through activity on cybercrime-focused forums. In that context, the intelligence body warns of a possible incident, but does not definitively attribute the source or content of the material.

What is known about the affected agency?

The agency named in the alert is Paraguay’s Ministry of Public Health and Social Welfare, an institution whose existence and ongoing activity were reflected in local press coverage in September 2026. Hoy Digital, for example, published a story on September 17 that mentioned MSPyBS in the context of management and information requests.

There is also an earlier reference from RDN, dated September 13, 2026, about Isaías Fretes being replaced by Barán as health minister. That context confirms the ministry was still part of Paraguay’s public agenda during those days, although it does not provide details about the alleged leak or any official response to VECERT’s alert.