Ecopetrol Cyberattack: Data of 3,300 Accounts Stolen, Markets on Edge

Colombia's state-controlled energy giant Ecopetrol revealed a cyberattack compromised data tied to approximately 3,300 user accounts across its 15 subsidiaries' cloud storage systems. The company stated there was no immediate disruption to operations, production capacity, or direct financial impact as of Friday, though hackers had communicated extortion demands and threatened to disclose stolen data. Ecopetrol warned the breach could have a material adverse effect on its business, reputation, or financial condition. As Latin America's largest energy producer and Colombia's top hydrocarbon entity, the incident raises concerns about regional energy security. The company is assessing the sensitivity of the exposed data, including whether personal information was compromised.

This cyberattack on Colombia's oil sector underscores growing risks to Latin America's energy reliability. While no immediate shock to global oil markets is expected, investors will monitor Ecopetrol's operational resilience and the effectiveness of its cybersecurity measures.