Ecopetrol says attackers entered cloud storage at about 15 group firms and downloaded data tied to about 3,300 accounts

According to Portafolio, citing an announcement from Ecopetrol, an external threat actor gained unauthorized access to cloud storage environments across approximately 15 companies within the group and downloaded data associated with roughly 3,300 user accounts ^[1]. The company stated that attempts to execute ransomware were blocked, but the threat actor demanded a ransom by threatening to publish the stolen data ^[1]. Ecopetrol revoked the compromised access and filed a criminal complaint with prosecutors, noting that no significant disruption to critical operations, production, or essential services had been identified at the time ^[1].

Industries mainly affected: Energy

Ecopetrol revoked the compromised access and filed a criminal complaint with prosecutors, noting that no significant disruption to critical operations, production, or essential services had been identified at the time ^[1].