Ecopetrol Reports Illegal Data Publication After Cyber Incident

Ecopetrol S.A. reported that an external actor illegally published information copied from 15 companies within its group, following a cybersecurity incident disclosed earlier in July 2026. The company is collaborating with the Office of the Attorney General of Colombia and the Ministry of Information and Communications Technologies to remove the illegally published data and limit access. Ecopetrol confirmed no compromise to its transactional technology solutions but noted that the full scope, impact, and costs of the incident remain uncertain, with potential for regulatory proceedings, litigation, and reputational harm.