Ecopetrol Cyberattack Exposes Data of 3,300 User Accounts

Ecopetrol S.A., Colombia's state-controlled energy company, reported a cybersecurity incident involving unauthorized access to its digital resources. The breach affected cloud-based file storage environments across 15 subsidiaries, resulting in the theft of data linked to approximately 3,300 user accounts. An unidentified external actor attempted a ransomware attack, which was successfully blocked by the company's cybersecurity measures. The attacker has made extortion demands, threatening to publicly disclose the stolen data. While no critical disruptions to operations or direct financial impacts have been identified, Ecopetrol cannot guarantee that the breach will not adversely affect its business and reputation. The company has initiated an investigation and activated incident response protocols to manage the situation. Ongoing assessments are being conducted to evaluate the potential exposure of sensitive corporate information.

Key Points: • Unauthorized access to data of 3,300 user accounts at Ecopetrol. • Attempted ransomware attack was blocked by existing cybersecurity measures. • Ecopetrol is investigating the incident and has activated its incident response protocols.