Agencia Nacional de Hidrocarburos

The Agencia Nacional de Hidrocarburos (ANH) is the national hydrocarbon agency of Colombia, operating as a government entity with core responsibilities in the regulation and oversight of the country's oil and gas sector. Its mandate encompasses the administration of hydrocarbon resources, including the management of exploration and production contracts, the monitoring of operational compliance, and the assurance of environmental standards within the extractive industry. The ANH functions as a key regulatory authority, tasked with balancing national energy interests with environmental protection and social responsibility in Colombia's significant oil-producing regions. Its work places it at the center of the nation's resource governance, interacting directly with international and domestic energy companies operating within Colombian territory. The agency's activities are fundamentally tied to the country's economic reliance on hydrocarbon exports, making its regulatory decisions impactful for both the national treasury and local ecosystems. By overseeing the technical and contractual aspects of extraction, the ANH serves as the principal state institution for ensuring that hydrocarbon activities adhere to established legal and environmental frameworks. Its position within the Colombian government structure highlights its critical role in the nation's energy policy and its commitment to managing the environmental footprint of fossil fuel operations.

The ANH's operational context and regulatory posture were thrust into a specific international spotlight in August 2022 when it was targeted by the hacktivist collective Guacamaya. This collective executed a breach that resulted in the leak of over two terabytes of internal emails and documents from the ANH, alongside data from several mining companies and other environmental oversight agencies across Central and South America. The incident was explicitly framed by the perpetrators as an action against alleged environmental exploitation and pollution linked to international corporations operating in the region. For the ANH, this event represented a significant compromise of its internal communications and documents, which were subsequently published on hacktivist platforms to expose perceived failures in environmental oversight. The breach underscored the agency's vulnerability to politically motivated cyber-attacks due to its high-profile regulatory function over a contentious industry. It also illustrated the targeting of state environmental regulators by groups seeking to publicly challenge the governance of extractive sectors. The data leak, therefore, is a documented event that intersects directly with the ANH's mission, highlighting the contentious nature of hydrocarbon regulation in Colombia and the agency's exposure to activism aimed at the extractive economy. This incident provides a clear, evidence-based point of reference regarding the external pressures and security challenges faced by the institution in the course of its statutory duties.