A prolonged technological outage at Bancolombia, one of Colombia’s largest financial institutions, has reignited debate among industry leaders and regulators about how to ensure minimum availability standards and robust response protocols for critical shared infrastructure such as Bre-B, the nation’s instant payment system.
Between February 22 and 24, 2026, Bancolombia, Colombia’s largest bank by assets and market capitalization, headquartered in Medellín, experienced a severe disruption that knocked out digital banking channels, ATMs, and even physical branches across much of the country. The outage also had cascading effects on Bre-B, the instant-payment rails overseen by Banco de la República, slowing or blocking transfers across multiple financial institutions and affecting consumers and businesses alike.
Technical Root Cause and Operational Impact
According to the bank, the outage stemmed from a routine maintenance operation that “did not go as expected.” During a planned system upgrade, a technical failure in infrastructure provided by an external supplier disrupted key server communication between data centers in Medellín and Bogotá. This communication breakdown prevented core digital services from restarting correctly and forced the bank to suspend online and in-branch operations to stabilize systems.
Bancolombia stressed that the incident was not a cybersecurity breach, but a glitch linked to its ongoing transition from legacy technology to modern platforms. Nonetheless, the outage left millions of customers unable to access accounts, make payments, or complete routine transfers, including some that depend on Bre-B’s instant-settlement capability.
Competitors Raise Structural Concerns
The event drew sharp criticism from fintech competitors, particularly Nu Colombia, local office of Brazilian challenger Nubank. Marcela Torres, the company’s general manager, called the outage “inaceptable” and warned that allowing a single institution’s downtime to affect Bre-B represents an unacceptable systemic risk. She argued that minimum availability standards and uniform service-level agreements (SLAs) should be defined for all participants in shared rails like Bre-B, with consequences for breaches, to better protect consumers and maintain trust in digital payments.
“The core of the issue is how to guarantee minimum availability and response times in critical infrastructure such as Bre-B, so that the failure of one entity does not affect the whole system,” she wrote on LinkedIn, reigniting industry discussion about resilience and shared responsibilities in open rails.
Bancolombia’s Response to Criticism
In response to competitor criticism, Bancolombia’s president, Juan Carlos Mora, pushed back publicly, describing some reactions as “disloyal” and as attempts to capitalize on the bank’s operational difficulties. Mora emphasized that the bank understands customer frustration and regrets the inconvenience, but defended its role in advancing digital payments in Colombia.
“We understand the frustration this has caused users,” he said, noting that Bancolombia has been a pioneer in promoting Bre-B and instant payments in Colombia. “We offer our sincere apologies and are taking responsibility for resolving the situation and providing the appropriate compensations to affected customers.”
Referring to public criticism, Mora also said: “Instead of supporting confidence in the system, some have chosen to use our difficult moment for competitive advantage. That does not help build trust in the system, and that is something we would never do.”
Restoration and Compensation Efforts
By February 24, Bancolombia reported that its services had been fully restored, and that automatic compensations would be processed for customers affected by errors such as duplicate charges or stalled transfers. The bank also explained that some transaction records might continue to show delays as systems fully synchronize after the outage, but assured users that transactions were recorded and would be updated soon.
The incident comes in the context of broader industry concerns about technological resilience and customer protection, including past regulatory actions. Earlier outages in 2024 led to fines and heightened oversight from Colombia’s financial regulator. In the wider tech context, a recent outage at cloud service Cloudflare also reminded how thousands and millions of web-based tools and resources depend on a few critical infrastructure providers and supported an urgent call for more resilient global network architectures.
Systemic Implications for Colombia’s Financial Infrastructure
As digital payments and real-time transfers account for an increasing share of daily transactions, the Bancolombia outage has raised crucial questions at the intersection of technology, competition and regulation:
- Should participation in shared payment rails like Bre-B require formal minimum uptime SLAs?
- What safeguards should be imposed to isolate a participant outage from wider systemic disruption?
- How should compensation frameworks and accountability mechanisms be structured to protect end users?
Industry analysts say that developing clear operational standards backed by regulators and enforced consistently may be essential to prevent similar outages from undermining trust in Colombia’s fast-growing digital finance ecosystem. Formal minimum uptime SLAs that require a company, such as a bank participating in a national payments system, to keep its systems operational for a specified percentage of time matter for shared payment systems like Bre-B, which is overseen by Banco de la República, since weaker infrastructure at one participant can create systemic fragility.
For now, the outage, though not having critical financial impact on users, has reinforced that redundancy, transparency and uniform availability requirements will be central to future discussions about how to keep Colombia’s payments infrastructure both innovative and resilient.
