Ecopetroloficial vs Pemex - Cyber Risk Comparison & Security Rating

Comparison Overview

Ecopetrol

PEMEX

Ecopetrol

Cra. 13 No. 36-24, Bogotá, CO, ----

Last Update: 13/09/2026

View Profile

Between 650 and 699

http://www.ecopetrol.com.co

655/1000Weak

Ecopetrol (NYSE: EC) es la compañía más grande en Colombia y uno de los principales grupos de energía de Latinoamérica. Cuenta con más de 18.000 empleados y es responsable del 60% de la producción de hidrocarburos en Colombia. Es propietaria de las dos refinerías del Co...

NAICS:211

NAICS Definition:Oil and Gas Extraction

Employees:13,056

Subsidiaries:2

12-month incidents

Known data breaches

Attack type number

PEMEX

Marina Nacional #329,, México, 11311, MX

Last Update: 18/09/2026

View Profile

Between 750 and 799

https://www.pemex.com

773/1000Fair

Petróleos Mexicanos es la mayor empresa de México, el mayor contribuyente fiscal del país, así como una de las empresas más grandes de América Latina. Es de las pocas empresas petroleras del mundo que desarrolla toda la cadena productiva de la industria, desde la exp...

NAICS:211

NAICS Definition:Oil and Gas Extraction

Employees:45,054

Subsidiaries:0

12-month incidents

Known data breaches

Attack type number

Compliance Ranges Comparison

Based On Specific Ai Models Category

Ecopetrol

ISO 27001Not verified

SOC2 Type 1Not verified

SOC2 Type 2Not verified

GDPRNot verified

PCI DSSNot verified

HIPAANot verified

PEMEX

ISO 27001Not verified

SOC2 Type 1Not verified

SOC2 Type 2Not verified

GDPRNot verified

PCI DSSNot verified

HIPAANot verified

Benchmark & Cyber Underwriting Signals

Incidents vs Oil and Gas Industry Avg (This Year)

Ecopetrol has 13.79% fewer incidents than the average of same-industry companies with at least one recorded incident.

Incidents

Incidents vs Oil and Gas Industry Avg (This Year)

No incidents recorded for PEMEX in 2026.

Incidents

Incident History - Ecopetrol (X = Date, Y = Severity)

Ecopetrol cyber incidents detection timeline including parent company and subsidiaries.

R - Ransomware

C - Cyber Attack

D - Data Breach

V - Vulnerability

Incident History - PEMEX (X = Date, Y = Severity)

PEMEX cyber incidents detection timeline including parent company and subsidiaries.

R - Ransomware

C - Cyber Attack

D - Data Breach

V - Vulnerability

Notable Incidents

Last Cyber / HR Incidents / Global...

Ecopetrol

Incidents

🔒 Incident : Ransomware

ECO1784557630

🔒 Incident : Breach

ECO1784348677

PEMEX

Incidents

🔒 Incident : Ransomware

PEM20304622

FAQ

Between Ecopetrol company and PEMEX company, which one has the best AI Cybersecurity Score ?

Between Ecopetrol company and PEMEX company, which one has experienced more cyber incidents in the past ?

Between Ecopetrol company and PEMEX company, which one has experienced more cyber incidents this year ?

Between Ecopetrol company and PEMEX company, which one has experienced at least one ransomware attack ?

Between Ecopetrol company and PEMEX company, which one has experienced at least one data breach ?

Between Ecopetrol company and PEMEX company, which one has experienced at least one targeted cyberattack ?

Between Ecopetrol company and PEMEX company, which one has experienced at least one vulnerability ?

Between Ecopetrol company and PEMEX company, which one holds the most compliance certifications ?

Between Ecopetrol company and PEMEX company, which one holds the fewest compliance certifications ?

Between Ecopetrol company and PEMEX company, which one has the most subsidiaries ?

Between Ecopetrol company and PEMEX company, which one has the largest number of employees ?

Between Ecopetrol and PEMEX, which company holds both SOC 2 Type 1 certifications ?

Between Ecopetrol and PEMEX, which company holds both SOC 2 Type 2 certifications ?

Which company is ISO 27001 certified - Ecopetrol or PEMEX ?

Which company is PCI DSS compliant - Ecopetrol or PEMEX ?

Between Ecopetrol and PEMEX, which company complies with HIPAA regulations for healthcare data ?

Between Ecopetrol and PEMEX, which company complies with GDPR requirements ?

Latest Global CVEs

CVE-2026-100739

SUMMARY

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file viewresult.php. Performing a manipulation of the argument seno results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.

PUBLISHED

Date2026-09-26

UPDATED

Date2026-09-26

RISK INFORMATION (Score: 7.3)

CVSS2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CVSS4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

IMPACT SCORE

3.4

EXPLOITABILITY

3.9

REFERENCES

CVE-2026-94408

SUMMARY

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

PUBLISHED

Date2026-09-26

UPDATED

Date2026-09-26

RISK INFORMATION (Score: 4.9)

CVSS3

Base Score: 4.9

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

IMPACT SCORE

3.6

EXPLOITABILITY

1.2

REFERENCES

https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-3-security-update-esa-2026-184/390688

CVE-2026-94400

SUMMARY

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive Allocation (CAPEC-130)

PUBLISHED

Date2026-09-26

UPDATED

Date2026-09-26

RISK INFORMATION (Score: 6.5)

CVSS3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

IMPACT SCORE

3.6

EXPLOITABILITY

2.8

REFERENCES

https://discuss.elastic.co/t/kibana-8-19-22-9-4-7-9-5-3-security-update-esa-2026-181/390685

CVE-2026-94399

SUMMARY

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

PUBLISHED

Date2026-09-26

UPDATED

Date2026-09-26

RISK INFORMATION (Score: 6.5)

CVSS3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

IMPACT SCORE

3.6

EXPLOITABILITY

2.8

REFERENCES

https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-4-security-update-esa-2026-180/390684

CVE-2026-94398

SUMMARY

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

PUBLISHED

Date2026-09-26

UPDATED

Date2026-09-26

RISK INFORMATION (Score: 6.5)

CVSS3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

IMPACT SCORE

3.6

EXPLOITABILITY

2.8

REFERENCES

https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-4-security-update-esa-2026-179/390683