Cyberattack at Ecopetrol, Colombia Energy Provider

July 24, 2026

INCIDENT

Colombia’s energy giant, Ecopetrol S.A., suffered a cyberattack as threat actors gained unauthorized access to certain digital resources as well as an attempted ransomware attack that ended up blocked by the controls implemented across the company and its subsidiaries, the company said Friday.
The unauthorized access affected cloud-based file storage environments of approximately 15 subsidiaries (including the company), resulting in the download of data associated with approximately 3,300 user accounts.
As a result of the attack, reported Friday, July 17, the unidentified threat actor communicated extortion demands, threatening to publicly disclose the stolen information.

Incident Date

July 17, 2026

Location

Colombia

Estimated Cost


No cost values disclosed.

Type of Malware

Threat Source