Cyber Incident Victim: Jurado de Enjuiciamiento de Magistrados
Date:
Jun 2025
Location:
Paraguay
Summary
Cyber attackers targeted the Jurado de Enjuiciamiento de Magistrados and the Ministry of Public Health and Social Welfare, prompting the institution to detect irregular activity and isolate its servers to protect data. The national cyber response center said the incidents were contained but remained under investigation, and officials also noted a earlier breach of the president’s social media account that was later restored.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On Saturday, June 21, 2025, the Paraguayan Cyber Incident Response Center (CERT‑PY) detected cyber incidents affecting the Jurado de Enjuiciamiento de Magistrados (JEM) and the Ministry of Public Health and Social Welfare (MSPBS). JEM reported that it had identified irregular activity on its systems that suggested, at minimum, a possible unauthorized access attempt. In response, JEM proceeded to block its servers in order to protect its files and programs. The Ministry of Information Technology and Communication (MITIC) was notified and activated its incident response protocols. Both institutions confirmed that the incidents had been contained.
Although the attacks were contained, MITIC indicated that the situations remained under investigation to restore normal operations. JEM did not disclose the specific nature of the irregular activity beyond the indication of a possible access attempt, nor did it provide details on any data that may have been viewed, altered, or exfiltrated. The blockage of JEM’s servers resulted in an interruption of its online services, though the duration of the interruption was not specified in the source. MSPBS likewise experienced a cyber incident, but the article does not describe the particular effects on its systems or services.
The article also notes a separate cyber event that occurred on June 9, 2025, when the X account of President Santiago Peña was compromised, allowing attackers to post information about a bitcoin announcement before the account was recovered. This earlier incident is mentioned in the same news piece but is not directly linked to the June 21 attacks on JEM and MSPBS. No further details about the attackers, their motives, or the technical methods used in either the June 9 or June 21 events are provided in the source material.