Ecopetrol suffered a cybersecurity incident involving unauthorized access to its digital infrastructure, with external attackers stealing data from nearly 3,300 user accounts and attempting extortion. The group also stopped a ransomware attempt that targeted about 15 Ecopetrol Group companies. #Ecopetrol #EcopetrolGroup
Information
- Victim: Ecopetrol
- Website: ecopetrol.com.co
- Country: Colombia
- Date Reported: 2026-07-17
Keypoints
- Ecopetrol reported a cybersecurity incident involving unauthorized access to its digital infrastructure.
- External threat actors stole data from nearly 3,300 user accounts.
- The attackers demanded payment to prevent the data from being disclosed.
- An attempted ransomware attack was blocked by Ecopetrol’s cybersecurity controls.
- The incident affected around 15 companies within the Ecopetrol Group.