Pipeline cyberattack seen as call to action on danger
NEW YORK — The shutdown of a vital U.S. pipeline because of a ransomware attack stretched into a third day Sunday, with the Biden administration saying an “allhandsondeck” effort is under way to restore operations and avoid disruptions in gasoline supply.
Experts said gas prices are unlikely to be affected if normal operations resume in the next few days but that the incident — the worst cyberattack to date on critical U.S. infrastructure — should serve as a wakeup call to companies about the vulnerabilities they face.
The pipeline, operated by Georgiabased Colonial Pipeline, carries gasoline and other fuel from Texas to the Northeast. It delivers roughly 45% of fuel consumed on the East Coast, according to the company.
Ransomware attacks are typically carried out by hackers who lock up computer systems by encrypting data and then demand a big ransom to release it. Colonial Pipeline has not said what was demanded or who made the demand.
However, two people close to the investigation who spoke on condition of anonymity identified the ransomware gang responsible as DarkSide. It has been active since August and, typical of the most potent ransomware gangs, is known to avoid targeting organizations in former Soviet bloc nations.
DarkSide is among ransomware gangs that have “professionalized” a criminal industry that has cost Western nations tens of billions of dollars in losses in the past three years.
It tries to promote a Robin Hood image, claiming that it does not attack medical, educational or government targets — only large corporations — and that it donates a portion of its take to charity.
Commerce Secretary Gina Raimondo said Sunday that ransomware attacks are “what businesses now have to worry about,” and that she will work “very vigorously” with the Homeland Security Department to address the problem, calling it a top priority for the administration.
“Unfortunately, these sorts of attacks are becoming more frequent,” she said on CBS’ “Face the Nation. ”We have to work in partnership with business to secure networks to defend ourselves against these attacks.”
She said President Biden was briefed on the attack.
“Its an allhandsondeck effort right now,” Raimondo said. “And we are working closely with the company, state and local officials to make sure that they get back up to normal operations as quickly as possible and there aren’t disruptions in supply.”
Security expert said the attack should be a warning for operators of critical infrastructure — including electrical and water utilities and energy and transportation companies — that not investing in updating their security puts them at risk of catastrophe.
Colonial Pipeline transports gasoline, diesel, jet fuel and home heating oil from refineries on the Gulf Coast through pipelines running from Texas to New Jersey. Its pipeline system spans more than 5,500 miles, transporting more than 100 million gallons a day.