THREATSColombia
Nueva EPS denies unauthorized access
Nueva EPS says its checks found no unauthorized access as it continues investigating claims of a data leak.
Oct 8, 2026 · 3 min
Colombia — News
Up-to-date cyber intelligence coverage. Filter by category or browse the full archive.
REGULATIONColombia
Colombia SFC adjusts Open Finance deadlines
Colombia’s financial regulator issued a new circular and reportedly extended Open Finance rollout deadlines by six months.
Oct 4, 2026 · 2 min
THREATSColombia
Air-e flags attacks on technicians and illegal grids
Air-e reported attacks on technicians and illegal power grid manipulation in Atlántico, while a separate Ecopetrol leak claim remained unverified.
Oct 3, 2026 · 2 min
REGULATIONColombia
Colombia's 2026C Bill 282 Adds Duties
Colombia’s Bill 282 of 2026C would add data breach reporting within 72 hours, new obligations and extraterritorial reach.
Sep 30, 2026 · 2 min
REGULATIONColombia
Colombia sets roadmap for open finance
Superfinanciera will publish the data-sharing standards schedule, and access will require the account holder’s express authorization.
Sep 21, 2026 · 4 min
THREATSColombia
Colombia logs 1.3 million cyber detections
Trellix counted 1.3 million detections in six months in Colombia, with banking, government and health accounting for most activity.
Sep 21, 2026 · 3 min
REGULATIONColombia
Colombia Advances Three Data Bills
Congress took up three measures on critical infrastructure, digital protection and video evidence, including a bill on critical services.
Sep 21, 2026 · 3 min
REGULATIONColombia
Colombia updates Data Law with Bill 282
Bill 282 of 2026 expands Colombia’s data protection scope and adds stricter compliance, oversight, and cross-border transfer rules.
Sep 19, 2026 · 2 min
REGULATIONColombia
Colombia orders banks to cover card fraud
Colombia’s financial watchdog said banks must reimburse card fraud losses when security rules are not met. It also fined Coltefinanciera.
Sep 18, 2026 · 2 min
REGULATIONColombia
SIC fines Productos EPA Colombia $140,000
Colombia’s SIC fined Productos EPA Colombia S.A.S. $140,476,000 over gaps in its online store and consumer withdrawal information.
Sep 17, 2026 · 2 min
REGULATIONColombia
Colombia backs biometrics for passports
Colombia’s Constitutional Court approved fingerprints and photos for passports, while the government set rules on minors and social networks.
Sep 17, 2026 · 2 min
REGULATIONColombia
Colombia tightens fiduciary risk controls
Colombia opens a public consultation on identity validation while Decree 510 imposes new fiduciary risk reporting duties.
Sep 14, 2026 · 2 min
REGULATIONColombia
Colombia: FNA and SFC update controls
FNA said it complies with Colombia’s risk rules, while the SFC issued a draft circular on global guarantees and ordered Fundación FG suspended.
Sep 12, 2026 · 2 min
REGULATIONColombia
Colombia SIC Opens Identity Verification Consultation
Colombia’s SIC opened a public consultation on identity verification and personal data processing, aimed at curbing impersonation by Sept. 25.
Sep 11, 2026 · 2 min
THREATSColombia
Colombia sees fraud and identity theft rise
A DataCrédito Experian study found 71% of Colombians faced at least one fraud attempt in the past year.
Sep 10, 2026 · 2 min
THREATSColombia
Colombia: AI speeds up digital fraud
TransUnion said 66% of financial consumers in Colombia faced digital fraud exposure, with vishing leading at 40%.
Sep 7, 2026 · 3 min
REGULATIONColombia
Colombia SFC publishes GERCO draft
Colombia’s Financial Superintendence opened the GERCO draft for comments until Sept. 15.
Sep 7, 2026 · 2 min
REGULATIONColombia
Colombia SFC opens comment period on open finance
The Superintendencia Financiera de Colombia opened comments on GERCO and open finance standards through Sept. 15.
Sep 5, 2026 · 4 min
REGULATIONColombia
Colombia advances AI and data bills
Colombia’s First Chamber Committee has logged bills to regulate AI and update the 2012 personal data law.
Sep 4, 2026 · 2 min
THREATSColombia
Colombia Leads Fraud Reports by Text Messages
In Colombia, 71% faced at least one fraud attempt in the past year, and 82% say these cases are increasing.
Sep 3, 2026 · 3 min
REGULATIONColombia
Colombia bills target SIMs, social media, utilities
Colombia’s Congress is weighing three bills on SIM cards, minors on social media, and public utility users, all with data safeguards.
Sep 2, 2026 · 2 min
REGULATIONColombia
Colombia SFC issues Circular 007 after quake
The SFC ordered relief measures and stronger support for affected clients, alongside a new cyberresilience agenda under its incoming chief.
Aug 31, 2026 · 4 min
REGULATIONColombia
Colombia updates open finance deadlines
The SFC opened comments on GERCO and set the open finance data exchange timeline, while supervision rules remain in force.
Aug 28, 2026 · 5 min
REGULATIONColombia
Colombia's AI bill remains stalled
Colombia's AI bill is still in first debate after being filed, shelved, reintroduced and given presidential urgency.
Aug 27, 2026 · 3 min
THREATSColombia
Colombia steps up grid security in Tolima
Prosecutors asked Tolima authorities, police and the army to report measures to protect the power grid after alleged attacks on transmission assets.
Aug 24, 2026 · 2 min
REGULATIONColombia
Colombia advances seismic alert bill
Two bills in Colombia add cybersecurity and technical rules for a national seismic alert system and speed camera oversight.
Aug 24, 2026 · 2 min
VULNERABILITIESColombia
COLCERT warns on Operation Dream Job
COLCERT warned on Operation Dream Job and CVE-2026-68820, a Windows flaw used to raise privileges and deploy malware.
Aug 22, 2026 · 3 min
THREATSColombia
Colombia Faces Ransomware, Justice Ministry Hit
Threat reports place Colombia among recent ransomware victims, while F5 and Security Arsenal also flagged related activity.
Aug 21, 2026 · 3 min
REGULATIONColombia
Colombia advances unified earthquake alerts
A Colombian Senate bill would create a national earthquake alert system for phones, radio and TV, with a six-month deadline.
Aug 21, 2026 · 3 min
REGULATIONColombia
Colombia tightens financial oversight
The Financial Superintendency opened a regulatory proposal, while DIAN added new cryptoasset reporting requirements.
Aug 18, 2026 · 3 min
REGULATIONColombia
Colombia moves ahead on 4 AI bills
Colombia’s Congress is debating four bills on AI and platforms, with new rules on transparency, data, labor
Aug 17, 2026 · 3 min
THREATSColombia
Colombia Justice Ministry Confirms Ransomware
Colombia’s Justice Ministry confirmed ransomware hit part of its infrastructure. No data theft was detected, and recovery is ongoing.
Aug 16, 2026 · 3 min
REGULATIONColombia
Colombia tightens financial security rules
Superfinanciera names new internal leaders and advances a regulatory agenda covering open finance and digital identity.
Aug 16, 2026 · 3 min
REGULATIONColombia
Colombia advances AI law, moves on minors
Colombia is moving ahead with an AI bill led by MinCiencias, while lawmakers introduced another measure to restrict minors' social media access.
Aug 15, 2026 · 3 min
THREATSColombia
Colombia Confirms Ransomware at Justice Ministry
Colombia’s Justice Ministry confirmed a ransomware incident that disrupted part of its infrastructure and some digital services.
Aug 14, 2026 · 2 min
THREATSColombia
Colombia, Panama Under Ransomware Pressure
Colombia confirmed a ransomware attack, while Panama saw AguAseo posted on a leak site tied to Gammax.
Aug 10, 2026 · 2 min
THREATSColombia
Colombia Hit in Ransomware Campaigns
Kaspersky linked Colombia to StrikeShark, while the Justice Ministry confirmed a ransomware attack that disrupted digital services.
Aug 6, 2026 · 2 min
THREATSColombia
Banco de Bogotá Warns on Digital Fraud
The bank published official channels to help customers spot impersonation attempts during the transfer of more than 250,000 Itaú clients.
Aug 5, 2026 · 2 min
THREATSColombia
Colombia Justice Ministry Confirms Ransomware Attack
Colombia’s Justice Ministry said ransomware hit part of its infrastructure and disrupted some services.
Aug 4, 2026 · 2 min
REGULATIONColombia
Colombia adds digital protections for minors
Colombia has new internet privacy rules for minors and bill proposals on social media are still moving through Congress.
Aug 3, 2026 · 2 min
REGULATIONColombia
Colombia CRC activates mobile fraud alerts
Resolution CRC 8308 of 2026 adds suspicious call alerts, commercial line registration, and controls on bulk SMS.
Aug 2, 2026 · 3 min
ANALYSISColombia
Colombia Sees Rise in AI Phishing
Bloomberg Línea reported hyperrealistic phishing and polymorphic malware in Colombia. Sumsub also flagged more account takeover attempts.
Aug 2, 2026 · 2 min
THREATSColombia
Colombia Warns on Phishing
Colombia’s police flagged campaigns impersonating state agencies, plus a mass operation targeting multiple government entities.
Aug 2, 2026 · 2 min
REGULATIONColombia
Colombia moves on data privacy law
Colombia's SIC says the bill modernizes Law 1581 of 2012 and expands coverage to Colombian and foreign firms handling data in Colombia.
Aug 2, 2026 · 1 min
THREATSColombia
Ecopetrol Coordinates Takedown of Leaked Files
Ecopetrol is working with Colombian authorities to remove leaked content after unauthorized access to its cloud environments.
Aug 1, 2026 · 3 min
THREATSColombia
Colombia sees 188% rise in account takeovers
Sumsub found a 188% jump in account takeover attempts in Colombia, driven by a 77% increase in deepfakes.
Aug 1, 2026 · 2 min
THREATSColombia
Colombia Hit in StrikeShark Campaigns
Kaspersky tied a StrikeShark campaign to victims in Colombia. Zscaler also reported a BlindEagle attack on a Colombian agency.
Jul 31, 2026 · 2 min
REGULATIONColombia
Colombia suspends state cyber procurement
Colombia Compra Eficiente paused for 30 days a procurement process for a cyber framework agreement after warnings from the prosecutor's office.
Jul 30, 2026 · 2 min
REGULATIONColombia
Colombia issues decree, bill on minors
Colombia has new rules for protecting children online, plus a bill that would limit social media access for users under 16.
Jul 29, 2026 · 3 min
THREATSColombia
Ecopetrol Confirms Data Leak After Cyberattack
Ecopetrol reported unauthorized cloud access and a ransomware attempt that exposed data tied to about 15 group companies.
Jul 29, 2026 · 3 min