Government's 'Delayed Response' Despite Warnings from External Experts… Estimated 7 Million People's Personal Information Exposed

Paraguay - An unprecedented personal data breach has occurred in Paraguay, causing significant repercussions across society. Public anxiety is escalating as the government's complacent and slow response, despite repeated warnings from external experts, comes under fire.

The data breach came to light after an anonymous cybersecurity expert issued a warning via social media. The expert claimed that the personal information of approximately 7 million Paraguayan citizens had been leaked, including sensitive data such as names, places of birth, occupations, genders, addresses, marital statuses, and dates of birth. The severity of the situation is amplified by the alleged sources of the leaked information: the Superior Tribunal of Electoral Justice, the Civil Registry Office, and databases of some political parties.

However, the initial response from the Paraguayan government has been deeply disappointing. The Minister of Information and Communication Technologies (Mitic) stated in a press interview, "We are investigating the connection to the cyberattack that occurred in August 2023 regarding allegations of data sales. Currently, there are no clear warnings of security vulnerabilities, and nothing can be confirmed." The government's seemingly indifferent attitude, failing to recognize the gravity of the situation, is drawing strong criticism.

Cybersecurity expert Miguel Ángel Gaspar warned, "This leak has left individuals defenseless, like being mugged by a 'motochorro' (motorcycle thief)," expressing concerns about secondary damage resulting from the misuse of personal information. Shockingly, identity theft cases have reportedly surged by 3,500% in neighboring areas due to personal data leaks.

Furthermore, this incident is serious in that it could lead to a decline in the overall credibility of Paraguay's national systems. The government's incompetence in protecting personal information is deepening public distrust in state institutions.

Recently released information reveals that the Paraguayan Cyber Attack Response Center (CERT-PY) detects 150 serious cyberattacks targeting public and private institutions every month. This is a fivefold increase compared to the monthly average of 30 incidents two years ago, clearly demonstrating the vulnerability of Paraguay's cybersecurity system.

Senator José Oviedo of the National Congress's Science and Technology Committee acknowledged, "We are pushing for legislation to prevent physical, cyber, and natural disaster risks to national infrastructure. Our country is very vulnerable in network protection and is not properly managing critical infrastructure."

Accordingly, the Paraguayan government must move beyond a complacent "under investigation" stance and actively address the seriousness of this situation. It must not hesitate to invest in enacting cybersecurity-related laws and establishing a comprehensive national cybersecurity plan, as well as securing relevant budgets, training specialized personnel, and building practical response training and infrastructure. Experts warn that if the government persists in its indifferent attitude without such efforts, Paraguay could become a more vulnerable nation to cyberattacks, potentially threatening its economic security and national sovereignty.