Ecopetrol Cyberattack: Data Breach Affects 3,300 User Accounts

• •Ecopetrol's cyberattack involved unauthorized access to data from 3,300 user accounts.
• •The company successfully blocked an attempted ransomware attack and activated incident response protocols.
• •No critical operational disruptions or direct financial impacts have been identified so far.

On July 17, 2026, Ecopetrol, Colombia's state-controlled energy company, reported a cyberattack involving unauthorized access to cloud-based file storage. The breach affected approximately 15 subsidiaries and resulted in the unlawful download of data linked to 3,300 user accounts. An unidentified external actor attempted a ransomware attack and issued extortion demands threatening to disclose the stolen information. Ecopetrol activated its incident response protocols, blocking unauthorized access and enhancing monitoring. As of the latest reports, the company has not identified any critical disruptions to operations or direct financial impacts, but it cannot guarantee that the incident will not adversely affect its business or reputation. The company is cooperating with national authorities and insurers to manage the fallout from this incident.