Skip to main content
Tags: pipeline | colonial | cyberattack

Top US Fuel Pipeline Operator Pushes to Recover From Cyberattack

Top US Fuel Pipeline Operator Pushes to Recover From Cyberattack
In this Sept. 8, 2008 file photo traffic on I-95 passes oil storage tanks owned by the Colonial Pipeline Company in Linden, N.J. A major pipeline that transports fuels along the East Coast says it had to stop operations because it was the victim of a cyberattack. (AP Photo/Mark Lennihan, File)

Sunday, 09 May 2021 06:18 AM EDT

Colonial Pipeline, top U.S. fuel pipeline operator, continued work on Sunday to recover from a ransomware cyberattack that forced it to shut down on Friday and sparked worries of a spike in retail gasoline prices.

The incident is one of the most disruptive digital ransom operations ever reported and has prompted calls from American lawmakers to tighten up protection for critical U.S. energy infrastructure against hackers.

Colonial said on Saturday it was "continuing to monitor the impact of this temporary service halt" and to work to restore service. It did not give an estimate for a restart date.

Colonial moves 2.5 million barrels per day of gasoline and other fuels from refiners on the Gulf Coast to consumers in the eastern and southern United States. It also serves some of the largest U.S. airports, including Atlanta's Hartsfield Jackson Airport, the world's busiest by passenger traffic.

Retail fuel experts including the American Automobile Association said an outage lasting several days could have significant impacts on regional fuel supplies, particularly in the U.S. Southeast.

While the U.S. government investigation is in early stages, a former U.S. official and two industry sources said the hackers are likely a professional cybercriminal group and that a group dubbed "DarkSide" was likely among the potential suspects.

DarkSide is known for deploying ransomware and extorting victims while avoiding targets in post-Soviet states. Ransomware is a type of malware designed to lock down systems by encrypting data and demanding payment to regain access.

Cybersecurity firm FireEye has also been brought in to respond to the attack, according to the two industry sources. FireEye declined to comment. Colonial said late on Saturday it was working with a "leading, third-party cybersecurity firm," but did not name the firm.

Bloomberg News, citing people familiar with the matter, reported late on Saturday that the hackers are part of DarkSide and took nearly 100 gigabytes of data out of Colonial's network on Thursday ahead of the pipeline shutdown.

Colonial did not immediately reply to an email from Reuters seeking comment outside usual U.S. business hours.

U.S. President Joe Biden was briefed on the incident on Saturday morning, a White House spokesperson said, adding that the government was working to try to help the company restore operations and prevent supply disruptions.

The privately held, Georgia-based company is owned by CDPQ Colonial Partners L.P., IFM (US) Colonial Pipeline 2 LLC, KKR-Keats Pipeline Investors L.P., Koch Capital Investments Company LLC and Shell Midstream Operating LLC.

Gasoline futures and diesel futures on the New York Mercantile Exchange rose on Friday after the outage was reported. In previous Colonial outages, retail prices have risen substantially, if briefly.

Oil refining companies contacted by Reuters on Saturday said their operations had not yet been impacted.

© 2024 Thomson/Reuters. All rights reserved.


Newsfront
Colonial Pipeline, top U.S. fuel pipeline operator, continued work on Sunday to recover from a ransomware cyberattack that forced it to shut down on Friday and sparked worries of a spike in retail gasoline prices.The incident is one of the most disruptive digital ransom...
pipeline, colonial, cyberattack
455
2021-18-09
Sunday, 09 May 2021 06:18 AM
Newsmax Media, Inc.

Sign up for Newsmax’s Daily Newsletter

Receive breaking news and original analysis - sent right to your inbox.

(Optional for Local News)
Privacy: We never share your email address.
Join the Newsmax Community
Read and Post Comments
Please review Community Guidelines before posting a comment.
 
TOP

Interest-Based Advertising | Do not sell or share my personal information

Newsmax, Moneynews, Newsmax Health, and Independent. American. are registered trademarks of Newsmax Media, Inc. Newsmax TV, and Newsmax World are trademarks of Newsmax Media, Inc.

NEWSMAX.COM
America's News Page
© Newsmax Media, Inc.
All Rights Reserved
Download the Newsmax App
NEWSMAX.COM
America's News Page
© Newsmax Media, Inc.
All Rights Reserved