Resecurity found 7.4 million records of Paraguayan citizens’ personal information leaked on the dark web today. Last week, cybercriminals attempted to sell this data for $7.4 million, or $1 per citizen. A ransomware group is extorting the country, marking a major cybersecurity event, with a deadline set for Friday, June 13, 2025. Cross-checking the acquired records reveals that one of the files, a stolen Civil Registry database, was leaked almost two years ago by another actor. Other files – have not been previously leaked, and contain records with timestamps from 2025.
Top 5 Latin American Tech Hubs
Assistance provided to victims of various forms of organized crime, including initiatives such as witness protection programs. The ability to control/manage the economy and regulate transactions (national and international) for trade to thrive within the rule of law. A state’s ability to implement measures to combat money laundering and other related threats to the integrity of its financial system.
What Are Darknets & Dark Markets?
The market is led by independent criminals with ties to networks in other Latin American countries and Europe. Internal trafficking, although accounting for only a small proportion of all trafficking cases, is nevertheless problematic. Child labour where marginalized families send their children to work for wealthier households, is a widespread practice in the country and one of the most visible and common forms of human trafficking. The other emerging issue is that current policing efforts treat dark web markets as the core threat, which might miss the wider landscape of digital harms.
Need An Automated Dark Web Monitoring Solution? Book A Demo To See How Breachsense Can Help
As of June 13, 2025, there were no official statements published shedding light on the incident or the circumstances of the data breach. Notably, at the beginning of May, the same actor was offering 5,598,639 records for sale originating from another unnamed government system in Paraguay. Since then, the situation has not improved, as new cyberattacks have continued to occur.

Cyble Partner Network (CPN) Join Us
These features help establish trust between buyers and sellers, providing users with a sense of security that many other markets lack. We The North Market is built for secure, trusted transactions with some of the lowest vendor fees in the industry. Markets that lack proper security often become targets for law enforcement, scammers, or cyberattacks. Finding a trusted dark web marketplace can be difficult, but we offer everything users need for a safe and smooth experience. Convert and track crypto rates for darknet marketplace transactions—stay ahead of the game. A comprehensive overview of 2025’s leading darknet trading hubs—each with unique strengths in listings, crypto options, and vendor reliability.
Only 17% Of People Can Pass This 3-question IQ Test On The First Try Can You?

Our project demonstrated the critical role of the TBA within the global illicit trade network. Its geographical location, the presence of isolated, porous, difficult-to-monitor borders combined with the presence of urban centers and a well developed infrastrucutre of roads and airports all make the TBA an optimal base of operations for criminal entities. As a consequence, several interconnected criminal markets originate, transit through, or terminate in the TBA making it a enormously complex hub of illicit trade where the lines between the white, grey, and black markets are often incredibly blurred. Illicit flows in the region are also facilitated by the presence of an extremely complex enabling environment. The result is that the hub suffers from higher-than-average levels of violence, including homicides, and the consequences of this criminality ripple outwards across the region.
Top Dark Web Marketplaces Of 2025: A Deeper Dive Into Illicit Trade Markets
In other words, these are corrupt politicians or individuals linked in some form to the state’s national or regional governance structures. They can be customs or judiciary officials, members of the military or police as mentioned previously, or officials in other government departments. These overlaps between the illicit actors and dirty politicians have generated an environment characterized by political protection and impunity from justice, which have over time led to the steady degradation of the democratic rule of law in the TBA. This peculiar combination makes it particularly attractive for both licit and illicit trade, and the region represents a source, transit point and destination for a wide variety of legal and illegal goods and services. In response, cybersecurity professionals, law enforcement agencies, and policymakers around the world are working to combat this growing menace.
- With 25,000+ users and 3,000+ vendors, it’s the gold standard for escrow security and scale.
- Classic darknet markets sell diverse illegal goods; data stores focus on leaked or stolen data like credentials, databases, and ID records.
- Launched in early November 2023 by the Brazilian Federal Police (PF), the early stages of the operation led to the arrest of three Brazilian citizens and the PF issuing international arrest warrants for two additional suspects.
- The primary objective of the actors was to gather data on the entire country’s population and target specific individuals.
- It is estimated that hundreds of private owners smuggle 40,000 kilos of cocaine through the airport each month.
It takes twoUpon his election in April last year, Mario Abdo Benítez pledged to deliver a “united Paraguay.” The following month, the government announced an open-ended suspension of arms and ammunition imports in a bid to fight illegal trafficking across the border. Benítez has additionally announced his decision to sign the WHO Protocol to Eliminate Illicit Trade in Tobacco Products. In 2015 alone, the government lost an estimated $1.1bn in revenue due to untaxed goods and services.
We developed Lunar to monitor the deep and dark web, including dark web marketplace sites. By supplying stolen data, these dark web links fuel many online scams and identity theft operations, playing a critical role in the darker aspects of the internet. The first category includes classic marketplaces, which serve as one-stop shops for a wide range of illegal goods. These platforms sell everything from drugs and fake IDs to weapons and hacking tools, resembling a digital black-market bazaar. Political deficienciesTobacco smuggling is the most lucrative business in Paraguay, with Nickson predicting that 90 percent of Paraguayan cigarettes are unlawfully exported.
US Based Archer Health Exposed 23 GB Patient Health Data
Considering that the data was stolen from several different sources, it is possible that the actors attempted to demonstrate the scale of the leak. Based on our current assessment, some of the impacted systems may have been compromised last year, but the stolen data from them has only now been leaked. The first reports about the country’s cybersecurity issues appeared nearly two years ago, when one of the affected government systems was compromised, although no data has been publicly released. At that time, China was accused of engaging in malicious cyber activity targeting South America, with Paraguay specifically mentioned.
Drughub Market
Flax Typhoon, a cyber-group linked to the Chinese state, was found to have infiltrated Paraguayan government networks, according to a joint statement from the Paraguayan Ministry of Information and Communication Technologies and the U.S. Since these markets operate on the Tor network, they require .onion links that are not indexed by regular search engines. This secure setup is useful for those who want to avoid government surveillance or keep their personal information safe from online threats. The dark web is home to many online marketplaces, offering everything from digital goods to rare items.

It has an active forum and community along with an extensive user vetting process. Launched in 2023, STYX focuses on financial crime, providing stolen credit card data, hacked bank accounts and access to various cryptocurrency laundering tools. Some are looking for illegal stuff they can’t buy elsewhere, like drugs or counterfeit documents. It underscores the importance of a multifaceted approach to address the complex challenges posed by the Tri-Border Area’s illicit trade and criminal networks. Effective solutions require collaboration at both national and international levels, targeting both the symptoms and underlying causes of the problem. For instance, anywhere between 30,000 to 40,000 people and 20,000 vehicles cross the Puente de la Amistad daily, with less than 10% of personal baggage or vehicle loads being inspected.