Ecopetrol Update: Cybersecurity Incident Confined to File Downloads, No Data Integrity Breach
EC sits 94% above its 52-week low of $8.265.
Summary
Ecopetrol's cybersecurity update confirms limited impact—only file downloads, no data integrity loss, and no compromise to transactional systems. Extortion demands are being managed with authorities.
Key Events · Legal and Risk Events · EC
-
Cybersecurity Incident Update
The impact was limited to file downloads, with no compromise to data integrity or transactional systems. While 3,300 accounts were infiltrated, no user identities or credentials were captured.
-
Extortion Demands Reported
An external threat actor made extortion demands based on unlawfully obtained information; the matter has been reported to relevant authorities.
-
Operational Continuity Maintained
There has been no disruption to Ecopetrol's operations or those of its subsidiaries and partners.
-
Ongoing Investigation and Collaboration
The company is working with Colombia's ColCERT, the Attorney General's cybercrime unit, CCOCI, and DIJIN to contain and investigate the incident.
Analysis · EC · Energy & Transportation
In its latest update on the July 17 cybersecurity incident, Ecopetrol confirms the attack was limited to file downloads, with no compromise to data integrity or transactional systems. Although 3,300 accounts were infiltrated, user identities and credentials were not captured. The company is managing extortion demands and collaborating with Colombian cyber authorities. Operations remain unaffected, but the extortion threat and ongoing investigation sustain material risk for Colombia's largest energy company.
At the time of this filing, EC was trading at $16.00 on NYSE in the Energy & Transportation sector, with a market capitalization of approximately $33.2B. The 52-week trading range was $8.27 to $17.75. This filing was assessed with negative market sentiment and an importance score of 7 out of 10.