Ecopetrol Confirms Data Breach in Cybersecurity Incident
Colombia’s state-owned oil company, Ecopetrol, has reported a data breach following a cybersecurity incident. The breach, disclosed in recent regulatory filings, exposed sensitive information, though the full scope of compromised data remains under investigation.
The attack targeted the company’s digital infrastructure, raising concerns about potential operational and financial risks. Ecopetrol, a major player in Latin America’s energy sector, has not yet released details on the attackers’ methods or whether ransomware was involved. Authorities and cybersecurity firms are assisting in the response.
The incident highlights growing cyber threats to critical infrastructure, particularly in the energy sector, where high-value targets face increasing attacks. Further updates are expected as the investigation progresses.
Ecopetrol TPRM report: https://www.rankiteo.com/company/ecopetrol
"id": "eco1784348677",
"linkid": "ecopetrol",
"type": "Breach",
"date": "7/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'industry': 'Energy',
'location': 'Colombia',
'name': 'Ecopetrol',
'type': 'State-owned oil company'}],
'data_breach': {'type_of_data_compromised': 'Sensitive information'},
'description': 'Colombia’s state-owned oil company, Ecopetrol, has reported a '
'data breach following a cybersecurity incident. The breach, '
'disclosed in recent regulatory filings, exposed sensitive '
'information, though the full scope of compromised data '
'remains under investigation. The attack targeted the '
'company’s digital infrastructure, raising concerns about '
'potential operational and financial risks.',
'impact': {'data_compromised': 'Sensitive information',
'operational_impact': 'Potential operational risks',
'systems_affected': 'Digital infrastructure'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Regulatory filings'}],
'regulatory_compliance': {'regulatory_notifications': 'Disclosed in '
'regulatory filings'},
'response': {'third_party_assistance': 'Authorities and cybersecurity firms'},
'title': 'Ecopetrol Data Breach',
'type': 'Data Breach'}