Ecopetrol warns of financial risk after cyberattack compromises 3,300 accounts
Colombia’s largest company reports no operational disruption but cautions that the breach could materially impact its financial condition as it assesses the extent of stolen information.
Colombian state-controlled energy producer Ecopetrol confirmed on Friday that a cyberattack resulted in the theft of data linked to approximately 3,300 user accounts. The breach impacted cloud-based file storage environments across 15 subsidiaries, including the parent company, prompting the firm to warn that the incident could have a material adverse financial impact on its business, reputation, and operating results.
Despite the security breach, the energy giant stated it had identified no critical disruption to its operations or production capacity as of Friday. Ecopetrol also confirmed that it successfully prevented an attempted ransomware attack. The company noted that no stolen data had been publicly disclosed by the hacker at the time of the report, and it had not yet assessed any direct financial impact.
The unidentified attacker communicated extortion demands to the company and threatened to release the stolen information. Ecopetrol said it was continuing to assess the potential exposure, which could include confidential, proprietary, or personal data. The firm cautioned that it could not guarantee the breach would not have a material adverse effect on its financial condition.
Ecopetrol is one of Latin America’s largest energy producers and stands as Colombia’s largest company, accounting for more than 60 per cent of the nation’s hydrocarbon production. The scale of the organisation means that any reputational or operational fallout from such incidents carries significant weight in the regional energy sector.
The announcement comes amid a broader trend of cyber incidents affecting major global corporations. Earlier in the week, Coca-Cola shares fell 4 per cent following the disclosure of a ransomware attack on its fairlife subsidiary. While the immediate operational impact on Ecopetrol appears contained, the uncertainty surrounding the extent of the data theft and the identity of the perpetrators leaves the company exposed to potential future liabilities.
