2026 Ecopetrol — cyberattack; data tied to ~3,300 user accounts stolen
Data compromised
Data associated with ~3,300 user accounts (company could not guarantee nature; may include confidential, restricted, proprietary, or personal data—under assessment)
Technical writeup
Colombian state-controlled energy company Ecopetrol S.A. disclosed on July 17, 2026 (PR Newswire) a cybersecurity incident involving an attempted ransomware attack that resulted in unauthorized download of data associated with approximately 3,300 user accounts, followed by extortion demands threatening public disclosure. Ecopetrol said it revoked unauthorized access, blocked mass-download mechanisms, filed a criminal complaint with Colombia's Attorney General, engaged insurers, and enhanced monitoring. As of the notice it had not identified material disruption to critical operations or confirmed public disclosure of the stolen set, but could not guarantee no material adverse effect and continues assessing whether corporate confidential/restricted/proprietary or personal data was included.
Root cause
Attempted ransomware / extortion cyberattack with unauthorized mass download of data associated with approximately 3,300 user accounts