May 7, 2021
Colonial Pipeline shut down by ransomware
Colonial Pipeline halted fuel deliveries on May 7, 2021 after a DarkSide ransomwareMalware that encrypts files and demands payment — a major threat to businesses and hospitals. attack — causing gas shortages across the U.S. East Coast and a $4.4 million BitcoinThe first decentralized cryptocurrency — a proof-of-work blockchain without a central issuer. ransom payment.
What it was for
A single compromised VPNVirtual private network — an encrypted tunnel over a public network. password without MFA took down critical energy infrastructure. The Biden administration responded with executive orders on cybersecurity; insurers raised ransomwareMalware that encrypts files and demands payment — a major threat to businesses and hospitals. premiums; and developers in OT-adjacent SaaSSoftware as a Service — applications delivered over the internet on a subscription basis. faced new customer security questionnaires about MFA, segmentation, and backup isolation.
Why it's here
Colonial Pipeline proved ransomwareMalware that encrypts files and demands payment — a major threat to businesses and hospitals. could affect physical-world fuel supplies, not just data.
Why it mattered
It triggered U.S. government action and corporate MFA mandates at scale.
What it solved
Nothing until recovery — legacy OT networks met modern criminal ransomwareMalware that encrypts files and demands payment — a major threat to businesses and hospitals. economics.
Media
ImageColonial Pipeline ransomware attackUnknown authorUnknown author, Public domain, via Wikimedia Commons
Related
- WannaCry ransomware spreads worldwideMay 12, 2017
- PC Cyborg AIDS Trojan — first known ransomwareDecember 1989
- FTX files for bankruptcy after liquidity collapseNovember 11, 2022