Ecopetrol disclosed on July 17 that an unidentified external actor successfully accessed its cloud storage environments without authorization, downloading data associated with approximately 3,300 user accounts across 15 companies within the Ecopetrol Group.