💰💣
Colonial Pipeline Security Incident
May 7, 2021
1599 days ago
Resolved
Incident Overview
Situation Description
Colonial Pipeline experienced a ransomware attack that led to a shutdown of its operations, causing significant disruptions and price increases for gasoline.
Event Types
Ransomware
Malware / Destructive Attack
Industry Sector
EnergyGeographic Scope
National (US)Response Actions
Isolated Compromised Systems
Took Systems or Services Offline
Restored Systems from Secure Backups
Paid a Ransom
Managed Public Narrative & Crisis Communications
Impact Analysis
Event Types (2 identified)
Ransomware
Malware / Destructive Attack
Financial Impact
$4,400,000 USDRecords Affected
0Data Types Compromised
Credentials
Operational / System Data
Primary Impacts
Operational Disruption
Financial Loss
Reputational Damage
Key Decisions Made
Joseph Blount, CEO of Colonial Pipeline, paid $4.4M USD in 75 Bitcoins to the DarkSide group as ransom.; Colonial Pipeline shut down its pipeline operations to prevent the ransomware from spreading to control systems.; Colonial Pipeline was forced to restore backups of data to restore operations due to the inefficiency of the decryption tool provided after payment.
Technical Analysis
Attack Method
Unknown
Threat Actor Attribution
DarkSide
Additional Information
Quick Facts
- Company:
- Colonial Pipeline
- Date:
- May 7, 2021
- Status:
- Resolved
- Decision Maker:
- Joseph Blount
- Position:
- CEO
- Published:
- nan
Source Information
Original Query
Colonial Pipeline stock price impact and long-term recovery post DarkSide attackTimeline
Information Published
nan
Incident Occurred
May 7, 2021 (1599 days ago)
Status: Resolved
Estimated resolution based on age