Ecopetrol Limits Cyberattack Damage but Faces Extortion Threats — Ecopetrol S.A.

Event summary

Ecopetrol confirms cyberattack limited to file downloads, with no data integrity compromise or user credential theft.
3,300 accounts infiltrated, but transactional systems and partner networks remain unaffected.
Company assessing extortion demands based on unlawfully obtained information, collaborating with Colombian authorities.
Operational activities continue uninterrupted as containment efforts advance.

The big picture

As a critical national infrastructure player in Colombia's energy sector, Ecopetrol's ability to mitigate cyber risks will set a precedent for other integrated energy companies in Latin America. The incident underscores growing vulnerabilities in digital ecosystems amid increasing state-sponsored and criminal cyber threats targeting strategic industries.

What we're watching

Extortion Risk Management: How Ecopetrol handles extortion demands will determine long-term reputational and financial impact.
Regulatory Scrutiny: Whether Colombian authorities can effectively support critical infrastructure against sophisticated cyber threats.
Operational Continuity: The pace at which Ecopetrol restores full digital ecosystem trust while maintaining uninterrupted operations.