Ecopetrol Cybersecurity Incident Escalates: Stolen Data Published, Government Steps In
EC sits 89% above its 52-week low of $8.265.
Summary
Ecopetrol's July cybersecurity incident has escalated: the external actor published stolen data from 15 subsidiaries. The company is working with Colombian authorities to remove the information and warns of uncertain financial and legal consequences.
Key Events · Legal and Risk Events · EC
-
Stolen Data Published Online
The external actor behind the July 2026 cybersecurity incident has published information illegally copied from 15 Ecopetrol Group companies, escalating the breach from unauthorized access to public disclosure.
-
Government Coordination to Remove Data
Ecopetrol is working with Colombia's Attorney General (Cybercrime Unit) and the Ministry of Information and Communications Technologies to take down the published information and limit access.
-
Uncertain Financial and Legal Impact
The company states the full scope, impact, and costs remain uncertain, and warns of potential regulatory proceedings, litigation, reputational harm, or other material adverse effects on its business, financial condition, or results of operations.
-
Transactional Systems Unaffected
Ecopetrol confirms no compromise has been identified in transactional technology solutions across its digital ecosystem, subsidiaries, or partner networks.
Analysis · EC · Energy & Transportation
What began as unauthorized access has now turned into a full-blown data leak, with stolen information from 15 subsidiaries published online. Ecopetrol is actively coordinating with Colombia's Attorney General and tech ministry to take down the illegally published material. While transactional systems remain uncompromised, the company warns that the full scope, costs, and legal fallout are uncertain — opening the door to regulatory action, litigation, and reputational damage. For Colombia's largest company, this marks a material worsening of an already serious event.
At the time of this filing, EC was trading at $15.64 on NYSE in the Energy & Transportation sector, with a market capitalization of approximately $32.4B. The 52-week trading range was $8.27 to $17.75. This filing was assessed with negative market sentiment and an importance score of 8 out of 10.