NewAI pentesting that proves every finding
INSECUREWEB

Data Breach News2 min read

7.4M Paraguay Citizens’ Data Leaked

By InsecureWeb Team

This report reflects observations of dark web activity. InsecureWeb makes no representations regarding the accuracy of this data.

7.4M Paraguay Citizens’ Data Leaked

Data Breach Summary

In May 2025, a significant data breach exposed personal information of approximately 7.4 million Paraguayan citizens. The threat actor known as Gatito_FBI_Nz claimed responsibility for the leak, which was shared on a dark web forum. The compromised data includes full names, national identification numbers, birthdates, civil status, professions, and other sensitive details. A sample of 940,000 records was made publicly available, with the full dataset reportedly offered for sale at $400 USD.

📍 Where and How?

The breach was announced on a dark web forum, where Gatito_FBI_Nz posted a sample of the data and criticized Paraguayan authorities for inadequate cybersecurity measures. The leaked information appears to have been extracted from a national database, potentially compromising the entire population’s personal records.

Breach History

This incident follows previous breaches in Paraguay, including a 2023 leak from the National Police that exposed documents and personal data of detained individuals. However, the current breach is unprecedented in scale, affecting millions of citizens and highlighting significant vulnerabilities in the country’s data protection infrastructure.

🔐 Recommendations for Personal Data Protection

To safeguard personal information in light of this breach, individuals are advised to:

  • Change passwords immediately, ensuring they are strong and unique.
  • Enable two-factor authentication (2FA) on all accounts that offer it.
  • Be vigilant for phishing emails or suspicious communications.
  • Monitor financial accounts and credit reports for unauthorized activities.
  • Consider using a reputable password manager to maintain secure credentials.

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.

More breach reports