Home / Business and Economy / Ecopetrol Suffers Data Breach, Extortion Attempt
Ecopetrol Suffers Data Breach, Extortion Attempt
18 Jul
Summary
- Cyberattack led to theft of 3,300 user accounts' data.
- Company cannot guarantee no material adverse financial impact.
- No critical disruption to operations or production identified yet.
Colombian state-controlled energy company Ecopetrol reported on July 17, 2026, that a cyberattack had resulted in the theft of data related to about 3,300 user accounts. The company indicated it cannot guarantee the breach will not have a material adverse financial impact on its operations.
As of July 17, 2026, Ecopetrol had not identified any critical disruption to its operations or production capacity, nor any direct financial impact. However, the hacker, who remains unidentified, has communicated extortion demands and threatened to publicly disclose the breached information.
The data breach affected cloud-based file storage environments across 15 subsidiaries, including Ecopetrol itself. The company successfully prevented an attempted ransomware attack and is continuing to assess the full extent of potential exposure. This could encompass confidential, proprietary, or personal data, and the incident may have a material adverse effect on the business, reputation, operating results, or financial condition.
