What data was compromised in Ecopetrol's cyberattack, and how many accounts were affected?

The cyberattack resulted in the theft of data tied to about 3,300 user accounts. The breach affected cloud-based file storage environments across 15 subsidiaries, including Ecopetrol itself, and potentially involved confidential, proprietary, or personal data. No stolen data had been disclosed by the hacker as of Friday, and the company had not identified the attacker.

Did the cyberattack disrupt Ecopetrol's operations or financial performance, and what was the company's assessment of potential impact?

As of Friday, Ecopetrol stated it had not identified any critical disruption to its operations, production capacity, or direct financial impact. However, the company acknowledged it could not 'guarantee' the breach would not have a 'material adverse' financial impact and warned the incident could materially affect its business, reputation, operating results, or financial condition.

Colombia's Ecopetrol Says Cyberattack Stole Data Tied to 3,300 Accounts

2026-04-23

Colombia's Ecopetrol to buy 26% stake in Brazil's Brava, seeks majority control

2026-04-27

Colombia's Ecopetrol Projects Up to 3 Trillion Pesos Profit in Q1

2026-05-26

Ecopetrol files tender offer to take control of Brazil's Brava

2026-07-17

Colombia's Ecopetrol Says Cyberattack Stole Data Tied to 3,300 Accounts

2026-09-15

Ecopetrol Approves Government-Backed Board Overhaul

Colombia's Ecopetrol Says Cyberattack Stole Data Tied to 3,300 Accounts

FAQ