Security Major Historical

Colonial Pipeline Ransomware Shuts Down US East Coast Fuel Supply for Five Days

DHS CISA
Colonial Pipeline Ransomware Shuts Down US East Coast Fuel Supply for Five Days
Fuel pipeline stretching across a green landscape, representing the Colonial Pipeline infrastructure hit by ransomware.Image: Colonial Pipeline Company — Public domain (PD-textlogo) via Wikimedia Commons · Public domain

What happened

DarkSide ransomware operators compromised Colonial Pipeline via a leaked VPN credential with no MFA. The company shut down 5,500 miles of pipeline as a precaution, causing fuel shortages across the US East Coast and a $4.4 million ransom payment. The FBI recovered approximately $2.3 million of the ransom.[1]

Colonial Pipeline's infrastructure — a DarkSide ransomware attack in May 2021 halted fuel supply to the US East Coast for five days.Image: Bad.Technology archive
Colonial Pipeline infrastructure with fuel storage tanks and pipeline
Image: Bad.Technology archive

What went wrong

A single legacy VPN account with a reused, previously leaked password and no multi-factor authentication was the entry point. The company's IT and OT networks were insufficiently separated, making shutdown of the pipeline a precautionary necessity rather than a targeted attack outcome.[1]

Lesson learned

MFA on all remote access accounts is not optional for critical infrastructure. IT and OT network separation must be air-tight — operational systems should never be reachable from compromised corporate networks. Password reuse across breached credentials is an ongoing, manageable risk.

Est. value burned ~$5B $4.4M ransom + fuel shortage economic impact
ransomwarecritical-infrastructuredarksidevpnicsUS

Sources

  1. [1]
    DHS CISA Wikipedia
    Colonial Pipeline Ransomware Shuts Down US East Coast Fuel Supply for Five Days Wayback Machine snapshot

External links can go dark — pages move, paywalls appear, domains expire. Every source above includes a Wayback Machine snapshot link as a fallback. All citations are best-effort research; if a source contradicts our summary, the primary source takes precedence.

More in Security