Colonial Pipeline Hack

Revisiting the facts after a week of news

Teri Radichel
Cloud Security

--

One of my articles on Data Breaches.

Free Content on Jobs in Cybersecurity | Sign up for the Email List

Any time a major cyberattack occurs, news organizations of all types rush to get out the news and report on the available facts to get the “scoop”. In my classes, I warn students to wait a few days before coming to a conclusion as often the facts evolve as new information emerges. Let’s take a look at the big picture now that we have more facts, starting with this one:

The pipeline was restarted as of Wednesday, May 12th.

If you are out of gas at your local station it is on the way.

Now let’s start from the top:

Colonial Pipeline found out they were hacked and put out a press release on Saturday, May 8, 12:30 p.m.

On May 7, the Colonial Pipeline Company learned it was the victim of a cybersecurity attack. We have since determined that this incident involves ransomware.

The Colonial Pipeline took systems offline:

In response, we proactively took certain systems offline to contain the threat, which has temporarily halted all pipeline operations, and affected some of our IT systems. Upon learning of the issue

--

--

Teri Radichel
Cloud Security

CEO 2nd Sight Lab | Penetration Testing & Assessments | AWS Hero | Masters of Infosec & Software Engineering | GSE 240 etc | IANS | SANS Difference Makers Award