Paraguay: Three Private Clinics Hit

What is known so far

A notice circulated by the U.S. Embassy in Paraguay, and republished by local media, warns of a cyber intrusion in the country and refers to attacks on three private clinics. According to that account, the institutions’ systems stopped working as a result of the incident.

Separately, a cybersecurity professional posted on LinkedIn that a ransomware attack compromised clinic systems in Paraguay and forced staff to return to paper records. That post does not identify the institutions involved or provide technical or official documentation to support the claim.

Reported coverage and scope

Paraguayan media outlets and official social media accounts link the attacks on private clinics to a broader cyber intrusion campaign attributed to a Chinese APT group. That coverage also mentions the deployment of new malware to maintain persistence in compromised networks.

Available information also says that, in the case of the clinics, doctors may have had to return to paper records. However, the Instagram post reproduced in that reporting does not include technical details, names of institutions, or official impact figures.

What has not been publicly confirmed

Based on the material available, no specific ransomware family or CVE has been publicly tied to the compromise of the health systems. The sources provided also do not identify any official CERT or CSIRT reports, nor do they name the affected clinics.

For now, the available material points to an alert about cyber intrusion in Paraguay, with references to three private clinics and an interruption of their systems, although part of the information is circulating without technical documentation or official confirmation in the posts reviewed.