Ransomware needs a way in. Stolen credentials are the cheapest one.

Ecopetrol Ransomware Attack

ecopetrol.com.coRansomed

the gentlemenGroup

ColombiaCountry

Jul 18, 2026Discovered

Ransom negotiation is currently in progress.

Overview

View group profile

Domain

ecopetrol.com.co

Industry

Energy & Utilities

Country

Colombia

Discovered

3 months ago

Attack date

Jul 19, 2026

Confidence

70%

Severity

High

Status

Negotiating

Threat group

the gentlemen

Total victims

954

First seen

Oct 2025

Last seen

Oct 2026

Group status

active

Sophistication

Impact score

Threat level

4.6/10

Aggressiveness10/10

Lethality0/10

Criticality3.6/10

Status breakdown

Data Leaked0.4%4

Negotiating

this victim

0.2%2

Claimed99.4%948

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Energy & Utilities

Known target sector

Country

Colombia

Frequently targeted country

Other victims

View all (954)

Same group · the gentlemen

Group activity

Monthly attacks · the gentlemen

954

total · avg 73.4/mo