Ecopetrol Reports Cybersecurity Breach Exposing 3,300 Accounts Across 15 Subsidiaries

summarizeSummary

Ecopetrol disclosed a cybersecurity incident involving unauthorized access to cloud storage across 15 subsidiaries, affecting approximately 3,300 user accounts. An external actor is demanding extortion and threatening to leak the stolen data; the company has not yet identified material operational disruption but warns of potential material adverse effects.

check_boxKey Events · Legal and Risk Events · EC

• Cybersecurity Breach

  Unauthorized access to cloud-based file storage environments of approximately 15 subsidiaries, resulting in the unauthorized download of data associated with approximately 3,300 user accounts.

• Extortion Demand

  The external actor communicated extortion demands, threatening to publicly disclose the unlawfully extracted information.

• Ransomware Attempt Blocked

  An attempted ransomware attack was blocked by the company's cybersecurity controls.

• Operational Impact Limited So Far

  As of the report date, no material disruption to critical operations, production capacity, or essential services has been identified.

auto_awesomeAnalysis · EC · Energy & Transportation

A cyberattack breached cloud storage across 15 Ecopetrol subsidiaries, exposing data from roughly 3,300 user accounts. The attacker is demanding extortion and threatening to leak the stolen information. While core operations are currently unaffected, the company cannot rule out a material financial or reputational hit — a serious risk for Colombia's largest energy firm, already navigating a credit downgrade, a CEO under criminal charge, and a suspended Brazilian acquisition.