CiberLATAMbywhalemate

Paraguay reports ransomware signs and exposed data

Local coverage says Paraguayan cooperatives are emerging from a ransomware attack, with more than 9 million records exposed online.

Whalemate Labs · AI-assisted researchPublished:2 min read

Local coverage said Paraguayan cooperatives are emerging from a ransomware attack attributed to the regulator Incoop. The same report cited more than 9 million records exposed online and an unusually high attack vector. MercoPress also reported a military bulletin allegedly affected by ransomware.

A local report in Paraguay said cooperatives are emerging from a ransomware attack attributed to the regulator Incoop. The same interview linked that episode to the highest attack vector in a long time and said more than 9 million data points are exposed on the web so far.

What did the local report say about the cooperatives?

Caaguazú Noticias Digital said a sector representative stated that Paraguayan cooperatives are coming out of a ransomware attack. In that same passage, the reference was tied to Incoop, the regulator mentioned in the report.

The material does not identify victims, the technical scope, or whether the impact hit one cooperative or several. It also does not name the initial vector or describe recovery, but it does point to a sensitive incident for the country’s cooperative and financial ecosystem.

What other exposure data was mentioned?

The same report said Paraguay saw the highest attack vector in a long time and that more than 9 million data points are exposed on the web to date. Those two figures appear as part of the interview published by Caaguazú Noticias Digital, with no further breakdown of origin, record types, or responsible parties.

The note also frames the comment in a conversation about cyberattacks and the use of artificial intelligence. According to that publication, the local sector is seeing signs of sustained pressure on exposed assets, although the text does not separate what came from earlier leaks and what may stem from recent incidents.

What happened with the armed forces?

MercoPress reported, without official confirmation in the available material, that the Paraguayan Armed Forces' General Directorate of ICT issued a bulletin warning all units about a ransomware infection that allegedly affected its computer systems.

The notice cited by that source does not provide technical details or show which systems were compromised, whether operations were affected, or whether the incident is still active. Based on the available elements, only an internal communication mentioned by MercoPress points to a possible intrusion in Paraguay’s military environment.

Sources

View all