Colonial Pipeline

Ransomware

Estimated loss

$2.70M

VERDICT —UNRATED

Verdict pending. Auto-ingested incidents are reviewed before a public verdict is rendered.

▰ METHOD

Undisclosed

Root cause

Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.

Forensic narrative

On May 7, 2021, Colonial Pipeline, the largest oil and gas pipeline operator in the United States, was targeted by a ransomware attack. The ransomware attack involved national critical infrastructure, which caused global shock and widespread concern. Was blackmailed to pay 5 million U.S. dollars worth of Bitcoin. Court documents show that the government recovered 63.7 bitcoins ($2.3 million). Attack method (per SlowMist): Ransomware. Reported loss: $ 2,700,000.

Primary source

https://en.wikipedia.org/wiki/Colonial_Pipeline_ransomware_attack ↗

Sourced from

slowmist

Technical record