Gunmen in Petrobras Uniforms Stage Botched Armored Truck Heist
Seven armed suspects disguised as Petrobras workers attempted to rob a Brink’s cash-in-transit truck in Soacha, Colombia, on 12 May 2026. Reports on 16 May indicate a violent shootout with guards left multiple people wounded.
Key Takeaways
- On 12 May 2026, seven suspects dressed as Petrobras employees tried to rob a Brink’s armored truck at a Soacha fuel station in Cundinamarca, Colombia.
- A gun battle erupted when the assailants confronted the guards, resulting in multiple injuries.
- The incident underscores persistent security risks to cash logistics operations and the sophisticated tactics used by Colombian criminal groups.
According to information reported on 16 May 2026 at around 03:00 UTC, a violent attempted robbery targeting a cash-in-transit vehicle occurred on 12 May at a service station in Soacha, in Colombia’s Cundinamarca department. Seven armed individuals, reportedly disguised as workers from the energy company Petrobras, attempted to ambush an armored truck operated by Brink’s. The operation devolved into an intense firefight with security personnel, leaving several individuals injured.
The attack took place at a gas station, a location likely chosen to exploit routine stops and the presence of employees whose uniforms the assailants could mimic. Disguised as Petrobras workers, the suspects sought to approach the armored vehicle with reduced suspicion before initiating the robbery. When confronted by the armored truck’s guards, the situation escalated quickly into a gun battle, with the attackers and security staff exchanging fire.
Key actors in the incident are the Brink’s security team, the seven unidentified assailants, local law enforcement, and Petrobras, whose corporate image was exploited via the use of counterfeit or stolen uniforms. While it is not yet clear which criminal organization, if any, orchestrated the attack, Colombia has a history of sophisticated heists and assaults on high-value cargo involving both local gangs and more structured criminal organizations that plan operations with military-style detail.
This incident is notable for its level of planning and the use of deception, hallmarks of more organized crime rather than opportunistic theft. The decision to disguise as employees of a well-known energy brand is intended to reduce scrutiny: fuel stations commonly host both company staff and subcontractors, making uniforms a practical cover. The ensuing firefight, however, indicates security teams were prepared to resist and had rules of engagement that prioritized defending the cargo.
From a security risk standpoint, the Soacha shooting reinforces the vulnerability of cash and value transport routes, even in daylight and in populated urban or peri-urban settings. It also highlights the broader challenge faced by armored transport companies operating in regions with entrenched criminal networks. While such firms invest heavily in training, armor, and procedures, adversaries adapt with new tactics, including infiltrating logistics information, surveilling routes, and exploiting predictable patterns.
The event carries implications for public safety, as shootouts near gas stations introduce elevated risks of collateral damage, fires, or explosions. Several people were reported injured, though precise numbers and identities were not detailed in the initial reporting. For Colombian authorities, the attack is another indicator that firearms remain readily accessible to criminal elements and that organized theft of high-value assets continues to evolve.
Regionally, Soacha’s proximity to Bogotá is concerning; if heavily armed heist teams operate comfortably near the capital, it suggests both the reach of criminal groups and potential gaps in intelligence or deterrence. For financial institutions, transport companies, and corporate customers, this may prompt reassessments of risk, routing, escort protocols, and the integration of technology such as GPS tracking, remote immobilization, and enhanced video surveillance.
Outlook & Way Forward
In the short term, Colombian police and prosecutorial authorities are likely to prioritize identifying and capturing the seven suspects involved in the attempted heist, using CCTV footage from the station and surrounding areas, ballistic evidence, and any recovered vehicles or weapons. Brink’s and Petrobras can be expected to cooperate closely with investigators, particularly regarding uniform sourcing and any potential internal information leaks.
Looking ahead, this incident may trigger tighter regulations and industry practices for cash-in-transit operations in the Bogotá metropolitan area, including more variable routing, additional escort vehicles, and stricter controls on access to information about schedules. Companies whose branding can be used as cover may review uniform issuance and employee identification protocols to reduce the risk of impersonation. Analysts should monitor for similar modus operandi in other departments, as copycat attacks are a known pattern when a tactic gains visibility. The balance between maintaining efficient cash logistics and ensuring staff and public safety will remain a central challenge for Colombia’s financial and security sectors.
Sources
- OSINT