Colombia's Ecopetrol reports cyberattack affecting 3,300 accounts

State‑controlled oil and gas producer Ecopetrol confirmed a cyberattack that accessed cloud‑based file storage used by about 15 subsidiaries. The breach led to the theft of data linked to roughly 3,300 user accounts.

The attackers, whose identity remains unknown, issued extortion demands and threatened to publish the stolen information. Ecopetrol blocked an attempted ransomware infection and has activated its incident‑response protocols, revoking unauthorized access and filing a criminal complaint.

The company reported no disruption to production, operations or direct financial loss so far, but warned that the breach could have a material adverse effect on its reputation, operating results or financial condition. An investigation is ongoing and authorities have been notified.