Colombia's Ecopetrol says cyberattack stole data tied to 3,300 accounts

Wait 5 sec.

Skip to navigationSkip to main contentSkip to right columnADVERTISEMENTReutersSat, July 18, 2026 at 6:22 AM GMT+2 1 min readJuly 17 (Reuters) - Colombian state-controlled energy company Ecopetrol said on Friday a cyberattack resulted in ‌the theft of data tied to about ‌3,300 user accounts and that it could not "guarantee" the breach ​would not have a "material adverse" financial impact.The company, however, said it had not identified any critical disruption to its operations, production capacity or any direct ‌financial impact as ⁠of Friday, and that no stolen data had yet been disclosed by the ⁠hacker.Ecopetrol is one of Latin America's largest energy producers and Colombia's largest company, accounting for more than ​60% of ​the country's hydrocarbon production.Ecopetrol ​said the hacker had ‌not been identified but had communicated extortion demands to the company and threatened to publicly disclose the hacked information.The data breach affected cloud-based file storage environments of 15 subsidiaries, including Ecopetrol itself, the ‌energy firm said, adding ​that it was able to ​prevent an attempted ​ransomware attack.The company said it was continuing ‌to assess potential exposure, ​which could include ​confidential, proprietary or personal data, and warned the incident could have a material adverse effect ​on its ‌business, reputation, operating results or financial condition.(Reporting by ​Preetika Parashuraman and Shubham Kalia in Bengaluru; ​Editing by Sam Holmes)Terms and Privacy PolicyEU DSA contactPrivacy & Cookie SettingsMore Info