WASHINGTON – The largest fuel pipeline system in the United States has been forced to shut down its entire network after a ransomware attack, said the operating company yesterday.
The Colonial Pipeline Company ships gasoline and jet fuel from the gulf coast of Texas to the populous east coast through 8,850km of pipeline, serving 50 million consumers.
It said it has been “the victim of a cybersecurity attack” involving ransomware – a kind of attack that encrypts computer systems and seeks to extract payments from operators.
“In response, we proactively took certain systems offline to contain the threat, which has temporarily halted all pipeline operations, and affected some of our IT systems.
“A leading, third-party cybersecurity firm was engaged, and they have launched an investigation into the nature and scope of this incident, which is ongoing. We have contacted law enforcement and other federal agencies.”
Colonial, based in the southern state of Georgia, is the largest pipeline operator in the US by volume, transporting 2.5 million barrels of gasoline, diesel fuel, jet fuel and other refined petroleum products daily.
The attack prompted calls from cybersecurity experts for improved oversight of the industry to better prepare for future threats.
‘More frequent attacks’
“This attack is unusual for the US. But the bottom line is that attacks targeting operational technology – the industrial control systems on the production line or plant floor – are becoming more frequent,” said Algirde Pipikaite, cyber strategy lead at the World Economic Forum’s Centre for Cybersecurity.
“Unless cybersecurity measures are embedded in a technology’s development phase, we are likely to see more frequent attacks on industrial systems like oil and gas pipelines or water treatment plants.”
Eric Goldstein, executive assistant director at the US Cybersecurity and Infrastructure Security Agency (Cisa), which is part of the Homeland Security Department, said Cisa is “engaged” with the company over the situation.
“This underscores the threat that ransomware poses to organisations, regardless of size or sector. We encourage every organisation to take action to strengthen their cybersecurity posture to reduce their exposure to these types of threats.”
The US was rocked in recent months by news of two major cybersecurity breaches: the massive SolarWinds hack that compromised thousands of government and private sector computer networks, and was officially blamed on Russia, and a potentially devastating penetration of Microsoft email servers.
The latter is believed to have affected at least 30,000 US organisations, including local governments, and was attributed to an aggressive Chinese cyberespionage campaign.
Both breaches appeared to be aimed at stealing emails and data, but they also created “back doors” that could allow attacks on physical infrastructure, said The New York Times. – AFP, May 9, 2021
