Ecopetrol Data Theft Hits 3,300 Accounts
Coverage from Yahoo, SRN News, and others

Ecopetrol reported that a cyberattack stole data associated with about 3,300 user accounts across cloud-based file storage environments at 15 subsidiaries.
The company said it prevented an attempted ransomware attack and had identified no critical disruption to operations or production capacity, but an unidentified attacker issued extortion demands and threatened to publish the information. The scope and sensitivity of the exposed data, along with any financial or reputational impact, remained under assessment.
The story is largely unchanged, but the latest version adds that Ecopetrol received explicit threats to publish the stolen data. It also slightly tightens the framing around the scope of the affected storage environments and confirms the impact assessment was still ongoing.
