there was no defacement of Google in Paraguay but the people were sent to a page that looked like a defacement
"Mormoroth published a number of screenshots to demonstrate that he had gained access to NIC.py’s backend systems. He leaked some user credentials and other information stolen from the site’s databases.
In a blog post on ha.cker.ir, the hacker has explained that he has leveraged a remote code execution (RCE) vulnerability to breach NIC.py.
This means that national DNS operators should take more care about the security of their operations and networks