Colombian energy giant Ecopetrol says thousands of user accounts hit in cyberattack

A pink triangle with a red exclamation mark inside on a blue digital landscape.

• Ecopetrol confirms ransomware attempt in which attackers stole data from 3,300 user accounts but failed to deploy the encryptor due to security controls
• Stolen files were pseudonymous, with no user identities or credentials compromised; transactional systems and partner networks remained unaffected
• The company ousted the attackers, launched an investigation, and notified Colombian authorities; no ransom demand details or data leaks have surfaced so far

Latin American energy producer Ecopetrol has revealed it was victim of a ransomware attack, and while the threat actors managed to get away with sensitive data from thousands of user accounts, they were unable to deploy the encryptor and thus disrupt the company’s day-to-day operations.