What happened

Ecopetrol’s SEC-filed update confirms unauthorized file downloads tied to about 3,300 accounts and extortion demands. It says attempts to destroy, delete or encrypt data did not compromise information integrity, user identities or credentials, and operational activities continued uninterrupted. This is a data-confidentiality incident, not an established refinery or pipeline shutdown. The marker is a Bogotá company reference, not a compromised server location.

When cited sources give different casualty, damage or spill figures for this event, they’re reported side by side above rather than merged into one number. See how confidence levels work.