Cyber Assault on Ecopetrol: Data Breach Shakes Energy Giant

Back Devdiscourse

Cyber Assault on Ecopetrol: Data Breach Shakes Energy Giant

Devdiscourse • July 18, 2026

Share: View original

A cyberattack on Ecopetrol, Colombia's state-owned energy company, surfaced on Friday with alarming repercussions.

The breach reportedly resulted in the theft of sensitive data related to approximately 3,300 user accounts.

The unidentified hacker has made extortion demands, threatening to publicly release the compromised data, placing Ecopetrol in a precarious position.

(With inputs from agencies.)

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Ecopetrol Cyberattack: Data Breach Affects 3,300 User Accounts On July 17, 2026, Ecopetrol, Colombia's state-controlled energy company, reported a cyberattack involving unauthorized access to cloud-based file storage. The breach affected approximately 15 subsidiaries and resulted in the unlawful download of data linked to 3,300 user accounts. An unidentified external actor attempted a ransomware attack and issued extortion demands threatening to disclose the stolen information. Ecopetrol activated its incident response protocols, blocking unauthorized access and enhancing monitoring. As of the latest reports, the company has not identified any critical disruptions to operations or direct financial impacts, but it cannot guarantee that the incident will not adversely affect its business or reputation. The company is cooperating with national authorities and insurers to manage the fallout from this incident. 19 sources 55

Extracted Entities

Attack Types (1)

Companies (1)

Countries (1)

Industries (1)

MITRE ATT&CK (1)

T1567 - Exfiltration Over Web Service