Ecopetrol cybersecurity incident

Ecopetrol S.A., Colombia's largest company and a major integrated energy firm, reported a cybersecurity incident on July 17, 2026. An unauthorized external actor accessed cloud-based file storage environments of approximately 15 subsidiaries, downloading data from about 3,300 user accounts. The actor also attempted a ransomware attack, which was blocked. Extortion demands were made, threatening public disclosure of the stolen data. Ecopetrol responded by revoking access, blocking mass downloads, filing a criminal complaint with the Colombia — Office of the Attorney General of Colombia, and enhancing monitoring. As of the report, no material disruption to operations or financial impact has been identified, but the company continues to assess potential exposure of confidential or personal data.