Colonial Pipeline ransomware attack: Difference between revisions
→Impact: Added a {{Failed verification}} |
Update about the ransomware payment. |
||
Line 26: | Line 26: | ||
| outcome = |
| outcome = |
||
}} |
}} |
||
On May 7, 2021, [[Colonial Pipeline]], an American [[oil pipeline]] system that originates in [[Houston, Texas]], and carries [[gasoline]] and [[jet fuel]] mainly to the [[Southeastern United States]], suffered a [[ransomware]] [[cyberattack]] that impacted computerized equipment managing the pipeline.<ref>{{cite web |first1=Christopher |last1=Bing |first2=Stephanie |last2=Kelly |date=May 8, 2021 |title=Cyber attack shuts down top U.S. fuel pipeline network |url=https://www.reuters.com/technology/colonial-pipeline-halts-all-pipeline-operations-after-cybersecurity-attack-2021-05-08/ |work=[[Reuters]] |access-date=May 8, 2021| archive-date=May 8, 2021 |archive-url=https://web.archive.org/web/20210508050319/https://www.reuters.com/technology/colonial-pipeline-halts-all-pipeline-operations-after-cybersecurity-attack-2021-05-08/ |url-status=live}}</ref><ref>{{cite web |first=Grace |last=Segers |date=May 8, 2021 |title=Cyberattack prompts major pipeline operator to halt operations |url=https://www.cbsnews.com/news/colonial-pipeline-cyberattack-halt-operations/ |work=[[CBS News]] |access-date=May 8, 2021 |archive-date=May 8, 2021 |archive-url=https://web.archive.org/web/20210508150203/https://www.cbsnews.com/news/colonial-pipeline-cyberattack-halt-operations/ |url-status=live}}</ref><ref name=npr>{{cite web |first=Marisa |last=Peñaloza |date=May 8, 2021 |title=Cybersecurity Attack Shuts Down A Top U.S. Gasoline Pipeline |url=https://www.npr.org/2021/05/08/995040240/cybersecurity-attack-shuts-down-a-top-u-s-gasoline-pipeline |work=[[NPR]] |access-date=May 8, 2021 |archive-date=May 8, 2021 |archive-url=https://web.archive.org/web/20210508181849/https://www.npr.org/2021/05/08/995040240/cybersecurity-attack-shuts-down-a-top-u-s-gasoline-pipeline |url-status=live}}</ref> In response, Colonial Pipeline Company halted all of the pipeline's operations to contain the attack.<ref name=nyt>{{cite web |first1=David |last1=Sanger |first2=Clifford |last2=Krauss |first3=Nicole |last3=Perlroth |date=May 8, 2021 |title=Cyberattack Forces a Shutdown of a Top U.S. Pipeline |url=https://www.nytimes.com/2021/05/08/us/cyberattack-colonial-pipeline.html |newspaper=[[New York Times]] |access-date=May 8, 2021 |archive-date=May 8, 2021| archive-url=https://web.archive.org/web/20210508120639/https://www.nytimes.com/2021/05/08/us/cyberattack-colonial-pipeline.html |url-status=live}}</ref><ref>{{cite web |first1=Collin |last1=Eaton |first2=Dustin |last2=Volz |date=May 8, 2021 |title=U.S. Pipeline Cyberattack Forces Closure|url=https://www.wsj.com/articles/cyberattack-forces-closure-of-largest-u-s-refined-fuel-pipeline-11620479737|newspaper=[[Wall Street Journal]] |access-date=May 8, 2021 |archive-date=May 8, 2021 |archive-url=https://web.archive.org/web/20210508131722/https://www.wsj.com/articles/cyberattack-forces-closure-of-largest-u-s-refined-fuel-pipeline-11620479737 |url-status=live}}</ref><ref>{{cite web |first=Veronica |last=Stracqualursi |date=May 8, 2021 |title=Cyberattack forces major US fuel pipeline to shut down |url=https://www.cnn.com/2021/05/08/politics/colonial-pipeline-cybersecurity-attack/index.html |work=[[CNN]] |access-date=May 8, 2021 |archive-date=May 8, 2021 |archive-url=https://web.archive.org/web/20210508151906/https://www.cnn.com/2021/05/08/politics/colonial-pipeline-cybersecurity-attack/index.html |url-status=live }}</ref><ref>{{cite web |date=May 8, 2021 |title=Colonial Pipeline blames ransomware for pipeline shutdown |url=https://www.nbcnews.com/news/us-news/cyberattack-forces-colonial-pipeline-shut-major-fuel-line-n1266737 |work=[[NBC News]] |access-date=May 8, 2021 |archive-date=May 8, 2021 |archive-url=https://web.archive.org/web/20210508085111/https://www.nbcnews.com/news/us-news/cyberattack-forces-colonial-pipeline-shut-major-fuel-line-n1266737 |url-status=live }}</ref> Colonial Pipeline paid the requested ransom (75 [[bitcoin]] or $4.4 million) within several hours after the attack.<ref name="paid hackers">{{cite web |title=Colonial Pipeline Paid Hackers nearly $5 Million in Ransom |url=https://www.bloomberg.com/news/articles/2021-05-13/colonial-pipeline-paid-hackers-nearly-5-million-in-ransom |first1=William |last1=Turton |first2=Michael |last2=Riley |first3=Jennifer |last3=Jacobs |date=May 12, 2021 |work=Bloomberg}}</ref> The hackers then sent Colonial Pipeline a software application to restore their network, but it operated very slowly.<ref name="paid hackers" /> |
On May 7, 2021, [[Colonial Pipeline]], an American [[oil pipeline]] system that originates in [[Houston, Texas]], and carries [[gasoline]] and [[jet fuel]] mainly to the [[Southeastern United States]], suffered a [[ransomware]] [[cyberattack]] that impacted computerized equipment managing the pipeline.<ref>{{cite web |first1=Christopher |last1=Bing |first2=Stephanie |last2=Kelly |date=May 8, 2021 |title=Cyber attack shuts down top U.S. fuel pipeline network |url=https://www.reuters.com/technology/colonial-pipeline-halts-all-pipeline-operations-after-cybersecurity-attack-2021-05-08/ |work=[[Reuters]] |access-date=May 8, 2021| archive-date=May 8, 2021 |archive-url=https://web.archive.org/web/20210508050319/https://www.reuters.com/technology/colonial-pipeline-halts-all-pipeline-operations-after-cybersecurity-attack-2021-05-08/ |url-status=live}}</ref><ref>{{cite web |first=Grace |last=Segers |date=May 8, 2021 |title=Cyberattack prompts major pipeline operator to halt operations |url=https://www.cbsnews.com/news/colonial-pipeline-cyberattack-halt-operations/ |work=[[CBS News]] |access-date=May 8, 2021 |archive-date=May 8, 2021 |archive-url=https://web.archive.org/web/20210508150203/https://www.cbsnews.com/news/colonial-pipeline-cyberattack-halt-operations/ |url-status=live}}</ref><ref name=npr>{{cite web |first=Marisa |last=Peñaloza |date=May 8, 2021 |title=Cybersecurity Attack Shuts Down A Top U.S. Gasoline Pipeline |url=https://www.npr.org/2021/05/08/995040240/cybersecurity-attack-shuts-down-a-top-u-s-gasoline-pipeline |work=[[NPR]] |access-date=May 8, 2021 |archive-date=May 8, 2021 |archive-url=https://web.archive.org/web/20210508181849/https://www.npr.org/2021/05/08/995040240/cybersecurity-attack-shuts-down-a-top-u-s-gasoline-pipeline |url-status=live}}</ref> In response, Colonial Pipeline Company halted all of the pipeline's operations to contain the attack.<ref name=nyt>{{cite web |first1=David |last1=Sanger |first2=Clifford |last2=Krauss |first3=Nicole |last3=Perlroth |date=May 8, 2021 |title=Cyberattack Forces a Shutdown of a Top U.S. Pipeline |url=https://www.nytimes.com/2021/05/08/us/cyberattack-colonial-pipeline.html |newspaper=[[New York Times]] |access-date=May 8, 2021 |archive-date=May 8, 2021| archive-url=https://web.archive.org/web/20210508120639/https://www.nytimes.com/2021/05/08/us/cyberattack-colonial-pipeline.html |url-status=live}}</ref><ref>{{cite web |first1=Collin |last1=Eaton |first2=Dustin |last2=Volz |date=May 8, 2021 |title=U.S. Pipeline Cyberattack Forces Closure|url=https://www.wsj.com/articles/cyberattack-forces-closure-of-largest-u-s-refined-fuel-pipeline-11620479737|newspaper=[[Wall Street Journal]] |access-date=May 8, 2021 |archive-date=May 8, 2021 |archive-url=https://web.archive.org/web/20210508131722/https://www.wsj.com/articles/cyberattack-forces-closure-of-largest-u-s-refined-fuel-pipeline-11620479737 |url-status=live}}</ref><ref>{{cite web |first=Veronica |last=Stracqualursi |date=May 8, 2021 |title=Cyberattack forces major US fuel pipeline to shut down |url=https://www.cnn.com/2021/05/08/politics/colonial-pipeline-cybersecurity-attack/index.html |work=[[CNN]] |access-date=May 8, 2021 |archive-date=May 8, 2021 |archive-url=https://web.archive.org/web/20210508151906/https://www.cnn.com/2021/05/08/politics/colonial-pipeline-cybersecurity-attack/index.html |url-status=live }}</ref><ref>{{cite web |date=May 8, 2021 |title=Colonial Pipeline blames ransomware for pipeline shutdown |url=https://www.nbcnews.com/news/us-news/cyberattack-forces-colonial-pipeline-shut-major-fuel-line-n1266737 |work=[[NBC News]] |access-date=May 8, 2021 |archive-date=May 8, 2021 |archive-url=https://web.archive.org/web/20210508085111/https://www.nbcnews.com/news/us-news/cyberattack-forces-colonial-pipeline-shut-major-fuel-line-n1266737 |url-status=live }}</ref> With the assistance of the FBI, Colonial Pipeline paid the requested ransom (75 [[bitcoin]] or $4.4 million) within several hours after the attack.<ref>[https://www.cnn.com/2021/06/07/politics/colonial-pipeline-ransomware-recovered/index.html First on CNN: US recovers millions in cryptocurrency paid to Colonial Pipeline ransomware hackers] [[CNN]]</ref> |
||
<ref name="paid hackers">{{cite web |title=Colonial Pipeline Paid Hackers nearly $5 Million in Ransom |url=https://www.bloomberg.com/news/articles/2021-05-13/colonial-pipeline-paid-hackers-nearly-5-million-in-ransom |first1=William |last1=Turton |first2=Michael |last2=Riley |first3=Jennifer |last3=Jacobs |date=May 12, 2021 |work=Bloomberg}}</ref> The hackers then sent Colonial Pipeline a software application to restore their network, but it operated very slowly.<ref name="paid hackers" /> |
|||
The [[Federal Motor Carrier Safety Administration]] issued a regional [[emergency declaration]] for 17 states and Washington, D.C., to keep fuel supply lines open on May 9.<ref>{{cite web|date=May 10, 2021 |title=Emergency declaration issued in 17 states and D.C. over fuel pipeline cyberattack |url=https://news.yahoo.com/biden-admin-declares-state-emergency-011332752.html |website=[[Yahoo! News]] |access-date=May 10, 2021}}</ref> It was the largest cyberattack on an oil infrastructure target in the history of the United States.<ref name=politico>{{cite news |title='Jugular' of the U.S. fuel pipeline system shuts down after cyberattack |quote=The infiltration of a major fuel pipeline is "the most significant, successful attack on energy infrastructure we know of." |first1=Gloria |last1=Gonzalez |first2=Ben |last2=Lefebvre |first3=Eric |last3=Geller |work=[[Politico]] |date=May 8, 2021 |url=https://www.politico.com/news/2021/05/08/colonial-pipeline-cyber-attack-485984 |access-date=May 9, 2021 |archive-date=May 9, 2021 |archive-url=https://web.archive.org/web/20210509154120/https://www.politico.com/news/2021/05/08/colonial-pipeline-cyber-attack-485984 |url-status=live}}</ref> The [[Federal Bureau of Investigation|FBI]] and various media sources identified the criminal hacking group [[DarkSide (hacking group)|DarkSide]] as the responsible party.<ref>{{cite web |title=Here's the hacking group responsible for the Colonial Pipeline shutdown |url=https://www.cnbc.com/2021/05/10/hacking-group-darkside-reportedly-responsible-for-colonial-pipeline-shutdown.html |first=Eamon |last=Javers |date=May 10, 2021 |work=[[CNBC]] |access-date=May 11, 2021 |archive-date=May 10, 2021 |archive-url=https://web.archive.org/web/20210510145819/https://www.cnbc.com/2021/05/10/hacking-group-darkside-reportedly-responsible-for-colonial-pipeline-shutdown.html |url-status=live}}</ref> The same group is believed to have stolen 100 gigabytes of data from company servers the day before the malware attack.<ref name=bloomberg>{{cite news |title=Colonial Hackers Stole Data Thursday Ahead of Shutdown |first1=Jordan |last1=Robertson |first2=William |last2=Turton|date= May 8, 2021 |work=[[Bloomberg News]] |url=https://www.bloomberg.com/news/articles/2021-05-09/colonial-hackers-stole-data-thursday-ahead-of-pipeline-shutdown |access-date=May 9, 2021 |archive-date=May 9, 2021 |archive-url=https://web.archive.org/web/20210509150415/https://www.bloomberg.com/news/articles/2021-05-09/colonial-hackers-stole-data-thursday-ahead-of-pipeline-shutdown |url-status=live}}</ref> |
The [[Federal Motor Carrier Safety Administration]] issued a regional [[emergency declaration]] for 17 states and Washington, D.C., to keep fuel supply lines open on May 9.<ref>{{cite web|date=May 10, 2021 |title=Emergency declaration issued in 17 states and D.C. over fuel pipeline cyberattack |url=https://news.yahoo.com/biden-admin-declares-state-emergency-011332752.html |website=[[Yahoo! News]] |access-date=May 10, 2021}}</ref> It was the largest cyberattack on an oil infrastructure target in the history of the United States.<ref name=politico>{{cite news |title='Jugular' of the U.S. fuel pipeline system shuts down after cyberattack |quote=The infiltration of a major fuel pipeline is "the most significant, successful attack on energy infrastructure we know of." |first1=Gloria |last1=Gonzalez |first2=Ben |last2=Lefebvre |first3=Eric |last3=Geller |work=[[Politico]] |date=May 8, 2021 |url=https://www.politico.com/news/2021/05/08/colonial-pipeline-cyber-attack-485984 |access-date=May 9, 2021 |archive-date=May 9, 2021 |archive-url=https://web.archive.org/web/20210509154120/https://www.politico.com/news/2021/05/08/colonial-pipeline-cyber-attack-485984 |url-status=live}}</ref> The [[Federal Bureau of Investigation|FBI]] and various media sources identified the criminal hacking group [[DarkSide (hacking group)|DarkSide]] as the responsible party.<ref>{{cite web |title=Here's the hacking group responsible for the Colonial Pipeline shutdown |url=https://www.cnbc.com/2021/05/10/hacking-group-darkside-reportedly-responsible-for-colonial-pipeline-shutdown.html |first=Eamon |last=Javers |date=May 10, 2021 |work=[[CNBC]] |access-date=May 11, 2021 |archive-date=May 10, 2021 |archive-url=https://web.archive.org/web/20210510145819/https://www.cnbc.com/2021/05/10/hacking-group-darkside-reportedly-responsible-for-colonial-pipeline-shutdown.html |url-status=live}}</ref> The same group is believed to have stolen 100 gigabytes of data from company servers the day before the malware attack.<ref name=bloomberg>{{cite news |title=Colonial Hackers Stole Data Thursday Ahead of Shutdown |first1=Jordan |last1=Robertson |first2=William |last2=Turton|date= May 8, 2021 |work=[[Bloomberg News]] |url=https://www.bloomberg.com/news/articles/2021-05-09/colonial-hackers-stole-data-thursday-ahead-of-pipeline-shutdown |access-date=May 9, 2021 |archive-date=May 9, 2021 |archive-url=https://web.archive.org/web/20210509150415/https://www.bloomberg.com/news/articles/2021-05-09/colonial-hackers-stole-data-thursday-ahead-of-pipeline-shutdown |url-status=live}}</ref> |
Revision as of 20:33, 7 June 2021
Date |
|
---|---|
Location | United States |
Type | Cyberattack, data breach, ransomware |
Target | Colonial Pipeline |
Suspects | DarkSide[2][3] |
On May 7, 2021, Colonial Pipeline, an American oil pipeline system that originates in Houston, Texas, and carries gasoline and jet fuel mainly to the Southeastern United States, suffered a ransomware cyberattack that impacted computerized equipment managing the pipeline.[4][5][6] In response, Colonial Pipeline Company halted all of the pipeline's operations to contain the attack.[7][8][9][10] With the assistance of the FBI, Colonial Pipeline paid the requested ransom (75 bitcoin or $4.4 million) within several hours after the attack.[11] [12] The hackers then sent Colonial Pipeline a software application to restore their network, but it operated very slowly.[12]
The Federal Motor Carrier Safety Administration issued a regional emergency declaration for 17 states and Washington, D.C., to keep fuel supply lines open on May 9.[13] It was the largest cyberattack on an oil infrastructure target in the history of the United States.[2] The FBI and various media sources identified the criminal hacking group DarkSide as the responsible party.[14] The same group is believed to have stolen 100 gigabytes of data from company servers the day before the malware attack.[1]
Background
The Colonial Pipeline carries gasoline, diesel and jet fuel from Texas to as far away as New York. About 45% of all fuel consumed on the East Coast arrives via the pipeline system. The attack came amid growing concerns over the vulnerability of infrastructure (including critical infrastructure) to cyberattacks after several high-profile attacks, including the 2020 SolarWinds hack that hit multiple federal government agencies, including the Defense, Treasury, State, and Homeland Security departments.[6][15]
Impact
![](http://upload.wikimedia.org/wikipedia/commons/thumb/1/1d/2021-05-15_14_33_28_Out-of-service_gas_pumps_due_to_panic_buying_after_the_Colonial_Pipeline_cyberattack_at_the_Wawa_along_Air_and_Space_Museum_Parkway_in_Oak_Hill%2C_Fairfax_County%2C_Virginia.jpg/220px-thumbnail.jpg)
![](http://upload.wikimedia.org/wikipedia/commons/thumb/6/6f/2021-05-14_20_59_41_An_out-of-service_gas_pump_due_to_panic_buying_after_the_Colonial_Pipeline_cyberattack_at_the_Sunoco_gas_station_in_the_Franklin_Farm_Village_Shopping_Center_in_the_Franklin_Farm_section_of_Oak_Hill%2C_Fairfax_County%2C_Virginia.jpg/220px-thumbnail.jpg)
Colonial Pipeline billing system was compromised while the operational technology systems were not affected. According to CNN sources in the company, the inability to bill the customers was the reason for halting the pipeline operation.[16] Colonial Pipeline reported that it shut down the pipeline as a precaution due to a concern that the hackers might have obtained information allowing them to carry out further attacks on vulnerable parts of the pipeline. The day after the attack, Colonial could not confirm at that time when the pipeline would resume normal functions.[7] The attackers also stole nearly 100 gigabytes of data and threatened to release it on the internet if the ransom was not paid.[1] It was reported that within hours after the attack the company paid a ransom of nearly 75 Bitcoins ($5 million) to the hackers in exchange for a decryption tool which proved so slow that Colonial's own backups were used to bring the system back online.[17][failed verification] On May 9, Colonial stated they planned to substantially repair and restore the pipeline's operations by the end of the week.[18]
In response to fuel shortages at Charlotte Douglas International Airport caused by the pipeline shutdown, American Airlines changed flight schedules temporarily.[19] At least two flights (to Honolulu and London) had fuel stops or plane changes added to their schedules for a four-day period. The shortage also required Hartsfield–Jackson Atlanta International Airport to use other fuel suppliers, and there are at least five other airports directly serviced by the pipeline.[20]
Fuel shortages began to occur at filling stations amid panic buying as the pipeline shutdown entered its fourth day.[21][22] Alabama, Florida, Georgia, North Carolina, and South Carolina all reported shortages.[21] Areas from northern South Carolina to southern Virginia were hardest hit, with 71% of filling stations running out of fuel in Charlotte on May 11[23] and 87 percent of stations out in Washington, D.C. on May 14.[24] Average fuel prices rose to their highest since 2014, reaching more than $3 a gallon.[25]
Responses
President Joe Biden declared a state of emergency on May 9. The declaration removed limits regarding the transport of fuels by road, in an attempt to alleviate any potential shortages.[26]
On May 10, Georgia Governor Brian Kemp declared a state of emergency,[27] and temporarily waived collection of the the state's taxes on motor fuels (diesel and gasoline).[28] In response to panic buying in the Southeast, U.S. Transportation Secretary Pete Buttigieg and U.S. Energy Secretary Jennifer Granholm on May 12 both cautioned against gasoline hoarding, reiterating that the United States was undergoing a "supply crunch" rather than a gas shortage.[29][30]
On May 12, the U.S. Consumer Product Safety Commission advised people to "not fill plastic bags with gasoline" or to use any containers not meant for fuel.[30]
Perpetrators
DarkSide released a statement on May 9 that did not directly mention the attack, but claimed that "our goal is to make money, and not creating problems for society".[31][26]
Pipeline restart
The restart of pipeline operations began at 5 p.m. on May 12,[32] ending a six-day shutdown, although Colonial Pipeline Company warned that it could take several more days for service to return to normal. The pipeline company stated that several markets that are served by the pipeline may experience, or continue to experience, intermittent service interruptions during the restart. The company also stated that they would move as much gasoline, diesel and jet fuel as safely possible until markets return to normal.[33][34] All Colonial Pipeline systems and operations had returned to normal by May 15.[32] After the shutdown, the average national cost rose to the highest it's been in over six years, to about an average of $3.04 a gallon on May 18th. The price increase was more pronounced in the southern states, with prices rising between 9 and 16 cents in the Carolinas, Tennessee, Virginia, and Georgia. Around 10,600 gas stations were still without gas as of May 18th.[35][36][37]
In a May 19, 2021 interview with The Wall Street Journal, Joseph Blount said why he ultimately decided to pay a $4.4 million ransom to hackers who breached the company’s systems; "It was the right thing to do for the country." He also said, "I know that's a highly controversial decision".[38]
Investigations
Biden said on May 10 that, though there was no evidence that the Russian government was responsible for the attack, there was evidence that the DarkSide group is in Russia, and that thus, Russian authorities "have some responsibility to deal with this".[39][40] Independent cybersecurity researchers have also stated the hacking group is Russian as their malware avoids encrypting files in a system where the language is set to Russian.[40][41]
In the aftermath of the attack, it was revealed at a Senate Armed Services cyber subcommittee hearing that the Department of Homeland Security was not alerted to the ransomware attack and that the Justice Department was not alerted to the ransom type or amount, prompting discussion about the numerous information silos in the government and difficulties of sharing.[42]
Blockchain analytics firm Elliptic published a bitcoin wallet report showing $90 million in bitcoin ransom payments were made to DarkSide or DarkSide affiliates over the last year, originating from 47 distinct wallets. According to a DarkTracer release of 2226 victim organizations since May of 2019, 99 organizations have been infected with the DarkSide malware - suggesting that approximately 47% of victims paid a ransom, and that the average payment was $1.9 million. The DarkSide developer had received bitcoins worth $15.5 million (17%), with the remaining $74.7 million (83%) going to the various affiliates.[43][44]
See also
References
- ^ a b c Robertson, Jordan; Turton, William (May 8, 2021). "Colonial Hackers Stole Data Thursday Ahead of Shutdown". Bloomberg News. Archived from the original on May 9, 2021. Retrieved May 9, 2021.
- ^ a b Gonzalez, Gloria; Lefebvre, Ben; Geller, Eric (May 8, 2021). "'Jugular' of the U.S. fuel pipeline system shuts down after cyberattack". Politico. Archived from the original on May 9, 2021. Retrieved May 9, 2021.
The infiltration of a major fuel pipeline is "the most significant, successful attack on energy infrastructure we know of."
- ^ Helmore, Edward (May 10, 2021). "FBI confirms DarkSide hacking group behind US pipeline shutdown". The Guardian. Archived from the original on May 12, 2021. Retrieved May 10, 2021.
- ^ Bing, Christopher; Kelly, Stephanie (May 8, 2021). "Cyber attack shuts down top U.S. fuel pipeline network". Reuters. Archived from the original on May 8, 2021. Retrieved May 8, 2021.
- ^ Segers, Grace (May 8, 2021). "Cyberattack prompts major pipeline operator to halt operations". CBS News. Archived from the original on May 8, 2021. Retrieved May 8, 2021.
- ^ a b Peñaloza, Marisa (May 8, 2021). "Cybersecurity Attack Shuts Down A Top U.S. Gasoline Pipeline". NPR. Archived from the original on May 8, 2021. Retrieved May 8, 2021.
- ^ a b Sanger, David; Krauss, Clifford; Perlroth, Nicole (May 8, 2021). "Cyberattack Forces a Shutdown of a Top U.S. Pipeline". New York Times. Archived from the original on May 8, 2021. Retrieved May 8, 2021.
- ^ Eaton, Collin; Volz, Dustin (May 8, 2021). "U.S. Pipeline Cyberattack Forces Closure". Wall Street Journal. Archived from the original on May 8, 2021. Retrieved May 8, 2021.
- ^ Stracqualursi, Veronica (May 8, 2021). "Cyberattack forces major US fuel pipeline to shut down". CNN. Archived from the original on May 8, 2021. Retrieved May 8, 2021.
- ^ "Colonial Pipeline blames ransomware for pipeline shutdown". NBC News. May 8, 2021. Archived from the original on May 8, 2021. Retrieved May 8, 2021.
- ^ First on CNN: US recovers millions in cryptocurrency paid to Colonial Pipeline ransomware hackers CNN
- ^ a b Turton, William; Riley, Michael; Jacobs, Jennifer (May 12, 2021). "Colonial Pipeline Paid Hackers nearly $5 Million in Ransom". Bloomberg.
- ^ "Emergency declaration issued in 17 states and D.C. over fuel pipeline cyberattack". Yahoo! News. May 10, 2021. Retrieved May 10, 2021.
- ^ Javers, Eamon (May 10, 2021). "Here's the hacking group responsible for the Colonial Pipeline shutdown". CNBC. Archived from the original on May 10, 2021. Retrieved May 11, 2021.
- ^ Walton, Robert (May 11, 2021). "Colonial Pipeline hack highlights grid disruption risks even with IT-focused cyberattack, analysts say". UtilityDive.
- ^ Bertrand, Natasha; Perez, Evan; Cohen, Zachary; Sands, Geneva; Campbell, Josh. "Colonial Pipeline did pay ransom to hackers, sources now say". CNN. Retrieved May 23, 2021.
- ^ Perlroth, Nicole (May 13, 2021). "Colonial Pipeline paid 75 Bitcoin, or roughly $5 million, to hackers". The New York Times. Retrieved May 13, 2021.
- ^ Bomey, Nathan. "Colonial Pipeline looking to 'substantially restore operations by end of week". USA TODAY. Archived from the original on May 10, 2021. Retrieved May 10, 2021.
- ^ "American Airlines adds fuel stops to two flights after pipeline outage". Reuters. May 11, 2021. Archived from the original on May 12, 2021. Retrieved May 11, 2021.
- ^ Josephs, Leslie (May 11, 2021). "Pipeline outage forces American Airlines to add stops to some long-haul flights". CNBC. Archived from the original on May 12, 2021. Retrieved May 11, 2021.
- ^ a b "Gas Stations Run Dry as Pipeline Races to Recover From Hacking". Bloomberg News. May 9, 2021. Archived from the original on May 10, 2021. Retrieved May 11, 2021.
- ^ "Petrol shortages sweep US as Colonial Pipeline remains down". Al Jazeera. Archived from the original on May 11, 2021. Retrieved May 11, 2021.
- ^ Lee, Ron (May 11, 2021). "GasBuddy reports 71% of gas stations without fuel in Charlotte metro amid Colonial Pipeline shutdown". WBTV. Charlotte, NC. Archived from the original on May 12, 2021. Retrieved May 12, 2021.
- ^ Shah, Jill R. (May 15, 2021). "Gasoline pinch to continue with truck shortage". The Charlotte Observer. p. A4 – via Bloomberg News.
- ^ Englund, Will; Nakashima, Ellen (May 12, 2021). "Panic buying strikes Southeastern United States as shuttered pipeline resumes operations". Washington Post. Retrieved May 13, 2021.
- ^ a b "US fuel pipeline hackers 'didn't mean to create problems'". BBC News. May 10, 2021. Archived from the original on May 10, 2021. Retrieved May 10, 2021.
- ^ Mahtani, Melissa; Macaya, Melissa; Hayes, Mike; Rocha, Veronica (May 11, 2021). "Latest on the US gas demand spikes". CNN. Archived from the original on May 12, 2021. Retrieved May 12, 2021.
- ^ "Kemp extends Georgia gas tax waiver due to pipeline outage". Associated Press. May 14, 2021.
- ^ Wagner, Meg; Macay, Melissa; Hayes, Mike; Mahtani, Melissa; Rocha, Veronica. "Gas shortages at some US stations: Live updates". CNN. Archived from the original on May 12, 2021. Retrieved May 12, 2021.
- ^ a b Brito, Christopher (May 12, 2021). "Officials warn people not to fill plastic bags with gasoline amid panic over gas shortage". CBS News. Retrieved May 13, 2021.
{{cite web}}
: CS1 maint: url-status (link) - ^ "DarkSide hackers behind Colonial Pipeline attack say they wanted cash, not chaos". Australian Broadcasting Corporation. May 10, 2021. Archived from the original on May 12, 2021. Retrieved May 10, 2021.
- ^ a b Lyons, Kim (May 15, 2021). "Colonial Pipeline says operations back to normal following ransomware attack". The Verge.
- ^ Egan, Matt; Duffy, Clare. "Colonial Pipeline launches restart after six-day shutdown". CNN Business. Archived from the original on May 12, 2021. Retrieved May 12, 2021.
- ^ Krauss, Clifford. "Colonial Pipeline Begins to Restart Flow of Fuel". The New York Times. Archived from the original on May 12, 2021. Retrieved May 12, 2021.
- ^ Eaton, Collin (May 18, 2021). "Colonial Pipeline Still Moving Fuel Despite Disruptions to Orders System". Wall Street Journal. ISSN 0099-9660. Retrieved May 19, 2021.
- ^ News, A. B. C. "Gas hits highest price in 6 years, fuel outages persist despite Colonial Pipeline restart". ABC News. Retrieved May 19, 2021.
{{cite web}}
:|last=
has generic name (help) - ^ "Colonial Pipeline's Computer Network Temporarily Goes Dark". www.bloomberg.com. Retrieved May 19, 2021.
{{cite web}}
: CS1 maint: url-status (link) - ^ Eaton, Collin; Volz, Dustin (May 19, 2021). "Colonial Pipeline CEO Tells Why He Paid Hackers a $4.4 Million Ransom". The Wall Street Journal. Retrieved May 20, 2021.
- ^ "Biden Says Russia Has 'Some Responsibility' In Pipeline Ransomware Attack". Radio Free Europe. May 10, 2021. Archived from the original on May 12, 2021. Retrieved May 11, 2021.
- ^ a b "US fuel pipeline hackers 'didn't mean to create problems'". BBC News. May 10, 2021. Archived from the original on May 10, 2021. Retrieved May 12, 2021.
- ^ Rivero, Nicolás. "Hacking collective DarkSide are state-sanctioned pirates". Quartz (publication). Archived from the original on May 12, 2021. Retrieved May 12, 2021.
- ^ "Lawmakers Grill Pentagon Officials on How to Prevent Another Colonial Pipeline-Style Attack". USNI News. May 18, 2021.
- ^ "DarkSide Ransomware has Netted Over $90 million in Bitcoin". Elliptic.co. May 18, 2021.
- ^ "Colonial Pipeline hacker Darkside reaped $90M from 47 victims". FOX Business. May 18, 2021.
External links
![](http://upload.wikimedia.org/wikipedia/en/thumb/4/4a/Commons-logo.svg/30px-Commons-logo.svg.png)