Ecopetrol Reports Cybersecurity Incident

Ecopetrol S.A. has reported a cybersecurity incident involving unauthorized access to digital resources and a blocked ransomware attack. An external actor gained unauthorized access to cloud-based file storage of approximately 15 subsidiaries, resulting in the download of data associated with about 3,300 user accounts. The attacker has made extortion demands. Ecopetrol has initiated an investigation, revoked access, blocked download mechanisms, and is cooperating with Colombian authorities. They have also engaged insurers and are assessing the downloaded information, which may include confidential or personal data. While no material disruption to operations or direct financial impact has been identified, the company cannot guarantee that the incident will not have an adverse effect on its business, reputation, operating results, or financial condition. Ecopetrol will disclose any material developments as required.