Hackers stole sensitive data linked to thousands of user accounts across fifteen subsidiaries of Colombia's state-controlled energy company Ecopetrol, demanding extortion payments and raising fresh concerns about the cybersecurity of critical energy infrastructure in Latin America.