Brazil-Paraguay Cyber Espionage Scandal Threatens Historic Energy Partnership Over Itaipu Dam

Reports from Brazilian investigative journalists reveal a clandestine cyber operation allegedly orchestrated by Brazil’s Intelligence Agency (ABIN) to infiltrate Paraguayan government systems between June 2022 and March 2023.

Targets included legislators, presidential advisors, and trade officials involved in sensitive negotiations over energy tariffs from the Itaipu Dam, the world’s second-largest hydroelectric facility shared by both nations.

Brazilian authorities claim the operation began under former President Jair Bolsonaro and was halted months after President Luiz Inácio Lula da Silva took office. The Brazilian Foreign Ministry denied current administration involvement, stressing Paraguay remains a “strategic Mercosur partner.”

Internal documents show ABIN agents used Cobalt Strike hacking tools to extract credentials from at least five Paraguayan officials. One agent testified the goal was securing leverage in Annex C negotiations, which dictate how Paraguay sells excess energy from Itaipu to Brazil.

In May 2024, Brazil finalized a $300 million annual deal for this energy—a figure Paraguay had previously resisted. Paraguayan Chancellor Rubén Ramírez Lezcano confirmed an ongoing probe but acknowledged no concrete evidence links Brazil to recent breaches.

Cybersecurity experts note Paraguay’s systems faced attacks from Chinese-linked groups in 2022, though officials emphasized no prior incidents targeted Itaipu negotiations.

Paraguay-Brazil Espionage Allegations

Paraguay’s Industry Minister called the allegations “unprecedented,” while Brazil’s Federal Police investigate whether ABIN’s actions violated international law under former director Alexandre Ramagem, a Bolsonaro ally.

The Itaipu Dam generates 88% of Paraguay’s electricity and 11% of Brazil’s, with annual revenues exceeding $1.3 billion. Disputes over energy pricing have simmered since the dam’s 1984 completion, but the cyber operation marks the first accusation of espionage between the neighbors.

Brazilian authorities insist the current administration terminated the operation upon discovery, though ABIN’s director at the time had not yet been confirmed by Congress.

Diplomatic tensions remain contained, with both nations emphasizing cooperation. Paraguay collaborates with U.S. and Taiwanese cybersecurity firms to fortify defenses, while Brazil seeks to reassure regional allies.

Analysts warn the scandal could undermine trust in Mercosur trade negotiations and complicate future energy agreements. The case underscores how cyber capabilities now shape geopolitical rivalries, even among allies.

As South America’s energy demands grow, the Itaipu Dam’s economic significance amplifies risks of covert interference. Investigations continue on both sides of the border, with outcomes likely influencing Brazil-Paraguay relations and regional stability for years.