Cyberattack exposes Ecopetrol (NYSE: EC) group data; impact still unclear
Rhea-AI Filing Summary
Ecopetrol S.A. reports that an external actor in a previously disclosed July 2026 cybersecurity incident has illegally published information copied from 15 companies within the Ecopetrol Group. The company is working with Colombia’s Attorney General’s Office (Cybercrime Unit) and the Ministry of ICT to remove this information from public access and limit further exposure.
Ecopetrol states that no compromise has been identified in the transactional technology solutions of the company, its subsidiaries, or its commercial and financial partners, suppliers, and customers. However, the full scope, impact, and costs of the incident remain uncertain, and the company notes the possibility of regulatory proceedings, litigation, reputational harm, or other material adverse effects on its business, financial condition, or results of operations.
Positive
- None.
Negative
- Cybersecurity incident with data publication: An external actor has illegally published information copied from 15 Ecopetrol Group companies, and the company warns that the full scope, impact, and costs are uncertain, with potential for regulatory proceedings, litigation, and reputational harm.
Key Figures
Key Terms
cybersecurity incident technical
transactional technology solutions technical
forward-looking statements regulatory
hydrocarbon production financial
power transmission business financial
AI-generated analysis. How Rhea-AI works. Not financial advice.
FAQ
What cybersecurity issue did Ecopetrol (EC) report in July 2026?
Which systems did Ecopetrol (EC) say were unaffected by the incident?
How is Ecopetrol (EC) responding to the illegal publication of its group data?
What risks does Ecopetrol (EC) associate with the July 2026 cybersecurity incident?
What legal warning did Ecopetrol (EC) give third parties accessing the leaked data?
How large is Ecopetrol (EC) and what is its role in Colombia’s energy sector?
UNITED STATES
SECURITIES AND EXCHANGE COMMISSION
Washington, D.C. 20549
FORM 6-K
REPORT OF FOREIGN PRIVATE ISSUER
PURSUANT TO RULE 13a-16 OR 15d-16 UNDER
THE SECURITIES EXCHANGE ACT OF 1934
For the month of July, 2026
Commission File Number 001-34175
| ECOPETROL S.A. |
|
(Exact name of registrant as specified in its charter)
|
| N.A. |
|
(Translation of registrant’s name into English)
|
| COLOMBIA |
|
(Jurisdiction of incorporation or organization)
|
| Carrera 13 No. 36 – 24 |
| BOGOTA D.C. – COLOMBIA |
| (Address of principal executive offices) |
Indicate by check mark whether the registrant files or will file annual reports under cover of Form 20-F or Form 40-F.
Form 20-F x Form 40-F ¨
Indicate by check mark if the registrant is submitting the Form 6-K in paper as permitted by Regulation S-T Rule 101(b)(1)
Yes ¨ No x
Indicate by check mark if the registrant is submitting the Form 6-K in paper as permitted by Regulation S-T Rule 101(b)(7)
Yes ¨ No x
Indicate by check mark whether the registrant by furnishing the information contained in this form is also thereby furnishing the information to the Commission pursuant to Rule 12g3-2(b) under the Securities Exchange Act of 1934.
Yes ¨ No x
If “Yes” is marked, indicate below the file number assigned to the registrant in connection with Rule 12g3-2(b): 82- N/A
SIGNATURES
Pursuant to the requirements of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned, thereunto duly authorized.
| Ecopetrol S.A. | ||||
|
By: |
/s/ Alfonso Camilo Barco | |||
| Name: |
Alfonso Camilo Barco |
|||
| Title: | Chief Financial Officer | |||
Date: July 28, 2026
Cybersecurity Incident: Ecopetrol Activates New Protocols Following Illegal Disclosure of Information
Bogotá, July 27, 2026
| · | Ecopetrol, in coordination with the relevant authorities, is taking steps to have the illegally published information removed from public access. |
| · | Ecopetrol continues to pursue legal action against the external actor. |
Ecopetrol S.A. (BVC: ECOPETROL; NYSE: EC) reports that, in connection with the cybersecurity incident disclosed earlier in July 2026, the external actor has published information that was illegally copied from 15 companies within the Ecopetrol Group. Accordingly, in collaboration with the Office of the Attorney General of Colombia—specifically its Cybercrime Unit—and the Ministry of Information and Communications Technologies, the Company is undertaking efforts to have the illegally published information taken down from public access and other actions to limit access to such information.
Just as the external actor’s actions violate regulations governing the handling of proprietary information belonging to the Corporate Group, third parties who access this information may likewise be acting in violation of laws and regulations.
Ecopetrol plans to continue with its investigations and collaborative efforts with authorities, with the aim of mitigating the effects of the illegal publications by the external actor.
Ecopetrol also confirms that no compromise has been identified in the transactional technology solutions within its digital ecosystem, those of its subsidiaries, or those of its network of commercial and financial partners, suppliers, and customers.
The full scope, impact, and costs of this cybersecurity incident remain uncertain. There can be no assurance that the Company's remediation efforts will be effective, that additional data will not be disclosed, or that the incident will not result in regulatory proceedings, litigation, reputational harm, or other material adverse effects on the Company's business, financial condition, or results of operations.
----------------------
Ecopetrol is the largest company in Colombia and one of the main integrated energy companies in the American continent, with more than 19,000 employees. In Colombia, it is responsible for more than 60% of the hydrocarbon production of most transportation, logistics, and hydrocarbon refining systems, and it holds leading positions in the petrochemicals and gas distribution segments. With the acquisition of 51.4% of ISA’s shares, the company participates in energy transmission, the management of real-time systems (XM), and the Barranquilla–Cartagena coastal highway concession. At the international level, Ecopetrol has a stake in strategic basins in the American continent, with drilling and exploration operations in the United States (Permian basin and the Gulf of Mexico), Brazil, and Mexico, and, through ISA and its subsidiaries, Ecopetrol holds leading positions in the power transmission business in Brazil, Chile, Peru, and Bolivia, road concessions in Chile, and the telecommunications sector.
This release contains statements that may be considered forward-looking statements within the meaning of Section 27A of the U.S. Securities Act of 1933, as amended, and Section 21E of the U.S. Securities Exchange Act of 1934, as amended. All forward-looking statements, whether made in this release or in future filings or press releases, or orally, address matters that involve risks and uncertainties, including in respect of the Company’s prospects for growth and its ongoing access to capital to fund the Company’s business plan, among others. Consequently, changes in the following factors, among others, could cause actual results to differ materially from those included in the forward-looking statements: market prices of oil & gas, our exploration, and production activities, market conditions, applicable regulations, the exchange rate, the Company’s competitiveness and the performance of Colombia’s economy and industry, to mention a few. We do not intend and do not assume any obligation to update these forward-looking statements.
For more information, please contact:
Investor Relations Office
Email: investors@ecopetrol.com.co
Head of Corporate Communications (Colombia)
Marcela Ulloa
Email: marcela.ulloa@ecopetrol.com.co