💰💣
Colonial Pipeline Security Incident
7/05/2021
1540 days ago
Resolved
Incident Overview
Situation Description
Colonial Pipeline was the victim of a ransomware infection by the DarkSide group, which resulted in approximately 100GB of data being stolen and a ransom payment of nearly $5 million USD.
Event Types
Ransomware
Malware / Destructive Attack
Industry Sector
EnergyGeographic Scope
National (US)Response Actions
Paid a Ransom
Notified Law Enforcement
Impact Analysis
Event Types (2 identified)
Ransomware
Malware / Destructive Attack
Financial Impact
$5,000,000 USDRecords Affected
0Data Types Compromised
PII (Personally Identifiable Information)
Operational / System Data
Primary Impacts
Operational Disruption
Financial Loss
Data Exposure
Key Decisions Made
Colonial Pipeline was the victim of a ransomware infection.; Colonial Pipeline allegedly paid almost $5 million USD to a DarkSide affiliate.; Many criminal forums banned ransomware and ransomware-as-a-service (RaaS) operators ended public communications regarding affiliate and partner recruitment.
Technical Analysis
Attack Method
Unknown
Threat Actor Attribution
DarkSide
CARBON SPIDER
Additional Information
Quick Facts
- Company:
- Colonial Pipeline
- Date:
- 7/05/2021
- Status:
- Resolved
- Decision Maker:
- nan
- Position:
- nan
- Published:
- 28/05/2021
Source Information
Original Query
company "press release" "ransomware incident" remediation steps 2021Timeline
Information Published
28/05/2021
Incident Occurred
7/05/2021 (1540 days ago)
Status: Resolved
Estimated resolution based on age