CSIDB logo
Incident

Jurado de Enjuiciamiento de Magistrados

Incident posture

Attack window
Jun 2025
Location
Paraguay
Status
Unknown
CIA posture
Available to members
Updated
2026-07-18 07:33

Linked entities

Victim
Jurado de Enjuiciamiento de Magistrados
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Jun 2025
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

Cyber attackers targeted the Jurado de Enjuiciamiento de Magistrados and the Ministry of Public Health and Social Welfare, prompting the institution to detect irregular activity and isolate its servers to protect data. The national cyber response center said the incidents were contained but remained under investigation, and officials also noted a earlier breach of the president’s social media account that was later restored.

Motives

Detailed motive labels are available to members.

2 motives

TTPs

Detailed technique labels are available to members.

2 techniques

Description

On Saturday, June 21, 2025, the Paraguayan Cyber Incident Response Center (CERT‑PY) detected cyber incidents affecting the Jurado de Enjuiciamiento de Magistrados (JEM) and the Ministry of Public Health and Social Welfare (MSPBS). JEM reported that it had identified irregular activity on its systems that suggested, at minimum, a possible unauthorized access attempt. In response, JEM proceeded to block its servers in order to protect its files and programs. The Ministry of Information Technology and Communication (MITIC) was notified and activated its incident response protocols. Both institutions confirmed that the incidents had been contained.

Although the attacks were contained, MITIC indicated that the situations remained under investigation to restore normal operations. JEM did not disclose the specific nature of the irregular activity beyond the indication of a possible access attempt, nor did it provide details on any data that may have been viewed, altered, or exfiltrated. The blockage of JEM’s servers resulted in an interruption of its online services, though the duration of the interruption was not specified in the source. MSPBS likewise experienced a cyber incident, but the article does not describe the particular effects on its systems or services.

The article also notes a separate cyber event that occurred on June 9, 2025, when the X account of President Santiago Peña was compromised, allowing attackers to post information about a bitcoin announcement before the account was recovered. This earlier incident is mentioned in the same news piece but is not directly linked to the June 21 attacks on JEM and MSPBS. No further details about the attackers, their motives, or the technical methods used in either the June 9 or June 21 events are provided in the source material.

Sources

Sources available to members: 1 source.

CSIDB