May 7, 2021

Colonial Pipeline shut down by ransomware

Colonial Pipeline halted fuel deliveries on May 7, 2021 after a DarkSide ransomwareMalware that encrypts files and demands payment — a major threat to businesses and hospitals. attack — causing gas shortages across the U.S. East Coast and a $4.4 million BitcoinThe first decentralized cryptocurrency — a proof-of-work blockchain without a central issuer. ransom payment.

What it was for

Colonial Pipeline ransomware attackA single compromised VPNVirtual private network — an encrypted tunnel over a public network. password without MFA took down critical energy infrastructure. The Biden administration responded with executive orders on cybersecurity; insurers raised ransomwareMalware that encrypts files and demands payment — a major threat to businesses and hospitals. premiums; and developers in OT-adjacent SaaSSoftware as a Service — applications delivered over the internet on a subscription basis. faced new customer security questionnaires about MFA, segmentation, and backup isolation.

Why it's here

Colonial Pipeline proved ransomwareMalware that encrypts files and demands payment — a major threat to businesses and hospitals. could affect physical-world fuel supplies, not just data.

Why it mattered

It triggered U.S. government action and corporate MFA mandates at scale.

What it solved

Nothing until recovery — legacy OT networks met modern criminal ransomwareMalware that encrypts files and demands payment — a major threat to businesses and hospitals. economics.

Media

  • Colonial Pipeline ransomware attack
    ImageColonial Pipeline ransomware attack

    Unknown authorUnknown author, Public domain, via Wikimedia Commons

Related