Colonial Pipeline controversies
Controversies tied to this brand in public sources. A listing is not a finding of fault.
Back to profile5 entries
2021
Colonial Pipeline ransomware attack
A ransomware attack against Colonial Pipeline's information systems prompted the company to stop pipeline operations. The resulting disruption affected refined-fuel distribution along the East Coast, caused localized shortages and panic buying, and intensified scrutiny of cybersecurity practices at critical infrastructure operators.
2021
North Carolina sues Colonial Pipeline over Huntersville spill information
Lawsuit filed
North Carolina environmental officials sued Colonial Pipeline, alleging it had failed to provide updates on the size and extent of the Huntersville gasoline spill. The state sought information and a court order directing the company to comply with its cleanup and restoration obligations.
Company response
Clarification — Colonial Pipeline
“Colonial Pipeline is reviewing the state of North Carolina’s legal filing submitted today. We are committed to working with NCDEQ to address the matters identified and will remain on site for as long as it takes to restore the surrounding environment.
Source excerpt
The suit says Colonial has broken state law by failing to provide updates on the size and extent of the spill.
State environmental officials have sued Colonial Pipeline in hopes of getting more information about the size of a massive gasoline spill in Huntersville 14 months ago.
Colonial Pipeline is reviewing the state of North Carolina’s legal filing submitted today. We are committed to working with NCDEQ to address the matters identified and will remain on site for as long as it takes to restore the surrounding environment.
2021
Colonial Pipeline reports personal-information breach
Issue disclosure
Colonial Pipeline said it had recently learned that DarkSide operators collected and exfiltrated documents containing personal information of 5,810 individuals during the May ransomware attack. The company was sending notification letters to affected individuals.
Company response
Ongoing disclosure — Colonial Pipeline
Colonial Pipeline, the largest fuel pipeline in the United States, is sending notification letters to individuals affected by the data breach resulting from the DarkSide ransomware attack that hit its network in May.
Source excerpt
The company says that it "recently learned" that DarkSide operators were also able to collect and exfiltrate documents containing personal information of a total of 5,810 individuals during their attack.
Colonial Pipeline, the largest fuel pipeline in the United States, is sending notification letters to individuals affected by the data breach resulting from the DarkSide ransomware attack that hit its network in May.
2021
Colonial Pipeline CEO apologizes for ransomware attack
Company response
Colonial Pipeline CEO Joseph Blount apologized in congressional testimony for the impact of a ransomware attack that interrupted the company's pipeline operations. He also took personal responsibility for the company's decision to pay a $4.4 million ransom.
Company response
Apology — Colonial Pipeline
The chief executive of Colonial Pipeline apologized for the ransomware attack that interrupted the supply line and caused gas prices to spike but argued he put country first in paying off the hackers.
Source excerpt
Blount's testimony marks his first appearance before Congress since the May 7 ransomware attack that led Georgia-based Colonial Pipeline, which supplies roughly half the fuel consumed on the East Coast, to temporarily halt operations.
'We are deeply sorry for the impact that this attack had,' he added.
The chief executive of Colonial Pipeline apologized for the ransomware attack that interrupted the supply line and caused gas prices to spike but argued he put country first in paying off the hackers.
2021
Colonial Pipeline confirms $4.4 million ransomware payment
Issue disclosure
Colonial Pipeline confirmed that it paid $4.4 million to the hackers who had intruded into its computer systems. Its CEO said the company authorized payment because executives were unsure how severely the attack had damaged systems or how long restoring safe pipeline operations would take.
Source excerpt
当地时间5月19日，美国最大的输油管道运营商科洛尼尔公司（Colonial Pipeline）证实，公司向侵入其电脑系统的黑客团伙支付了440万美元的赎金。
公司首席执行官布朗特（Joseph Blount）接受媒体采访时表示，之所以授权支付赎金，是因为公司高管在收到勒索信时，不确定网络攻击对系统的破坏程度有多严重，以及输油管道恢复安全运营需花费多长时间。