[News](/news) Ransomware Attack Cripples Colonial Pipeline [Blog](/blog)[Breaches](/breaches)[Resources](/resources)[News](/news) # Ransomware Attack Cripples Colonial Pipeline ##### [Edward Kost](/team/edward-kost) May 9, 2021 [Colonial Pipeline](https://www.upguard.com/security-report/colonial-pipeline), one of the largest U.S. suppliers of refined gasoline, has fallen victim to a ransomware attack, forcing the 5,500-mile pipeline to shut down. The magnitude of the disruption, which impacted almost half of the U.S. East Coast, has called the attention of the F.B.I., the Energy Department, and the White House who are currently involved in investigations. This the latest incident from a series of nation-state cyberattacks making a mockery of cybersecurity standards in the United States. In an effort to finally disruptive this pernicious trend, President Joe Biden has signed a [Cybersecurity Executive Order](https://www.upguard.com/blog/cybersecurity-executive-order) calling for a dramatic reformation of security programs throughout government entities and the entire private sector. Cybercriminals infiltrated Colonial’s corporate computer network before launching their ransomware attack, in which sensitive data is encrypted and held hostage until the victim pays a ransom. Colonial Pipeline [said in a statement](https://www.colpipe.com/news/press-releases/media-statement-colonial-pipeline-system-disruption) that the decision to shut down the entire pipeline was strategic, to prevent the further comprise of sensitive data. “Quickly after learning of the attack, Colonial proactively took certain systems offline to contain the threat. These actions temporarily halted all pipeline operations and affected some of our IT systems, which we are actively in the process of restoring.” Colonial Pipeline said in its statement. On Tuesday, May 11, the F.B.I confirmed that Russian cybercriminal group known as "Darkside" was responsible for the cyberattack. Darkside is relatively new to the cybercriminal arena but their extremely talented, as evidenced by their choice of disrupting a major U.S pipeline to announce their existence on the world stage. > FBI Statement on Compromise of Colonial Pipeline Networks [pic.twitter.com/McrRFOil64](https://t.co/McrRFOil64) > > — FBI (@FBI) [May 10, 2021](https://twitter.com/FBI/status/1391783864016703493?ref_src=twsrc%5Etfw) Intelligence on the group's tactics and are still developing, but it's speculated the threat actors may be affiliated with the [Ransomware-as-a-Service](https://www.upguard.com/blog/what-is-ransomware-as-a-service) operation REvil, due to the similarities between ransom letters: ‍ While a hunt for the perpetrators is a critical initiate, it should not eclipse the glaring security faults that made this attack possible. Colonial Pipeline has serviced the East Coast since the early 1960s. Upgrading the technology of such ageing infrastructures is not easy and usually requires security-compromising methods to establish a connection to the internet. Cybercriminals are aware of this gaffer tape method of upgrading network security which is why attacks on veteran U.S. entities have soared. Recent victims include: * [The District of Columbia Police Department](https://abcnews.go.com/US/dc-police-department-reports-unauthorized-access-server/story?id=77339046) * [Hospitals globally](https://www.intelligentciso.com/2021/02/09/cyberattacks-on-hospitals-spike-by-45-worldwide/) * [Canadian IoT maker Sierra Wireless](https://www.zdnet.com/article/ransomware-attack-halts-production-at-iot-maker-sierra-wireless/) * [Schools throughout the U.S](https://www.standard.net/news/2021/mar/31/be-on-the-lookout-as-ransomware-targets-schools/) * [Florida water treatment facility](https://www.upguard.com/news/water-supply-cyberattack) The Colonial Pipeline ransomware attack is a disturbing demonstrating of the gaping vulnerabilities currently exposing many legacy U.S entities. To avoid compromise, such organizations must [immediately evaluate their security posture](https://www.upguard.com/instant-security-score), lest they remain as sitting ducks for cybercriminals.  ## How secure is Colonial Pipeline? Colonial Pipeline operates a refined petroleum products pipeline system that transports gasoline, diesel fuel, jet fuel, and home heating oil from the Gulf Coast to markets in the southeastern and eastern United States. The company provides transportation services for major oil companies and distributors. * View our free preliminary report on Colonial Pipeline’s security posture * 13 risk factors, including email security, SSL, DNS health, open ports and common vulnerabilities [View Colonial Pipeline's score](/security-report/colonial-pipeline) [View score](/security-report/colonial-pipeline) [https://www.colpipe.com/](/security-report/colonial-pipeline) ### Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights. ## Latest news Stay up-to-date with the latest news in cybersecurity. [](/news/hugging-face-data-breach-2026-07-20) #### [Hugging Face data breach: key facts and what we know so far](/news/hugging-face-data-breach-2026-07-20) A data breach involving Hugging Face was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 20, 2026 [](/news/ey-data-breach-2026-07-19) #### [EY data breach: what happened and what's at risk](/news/ey-data-breach-2026-07-19) A data breach involving EY was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) #### [South Florida Injury & Convenient Care data breach exposes names and Social Security numbers](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) A data breach involving South Florida Injury & Convenient Care was reported in July 2026. See incident details, impact on customers, and security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/park-west-psychology-data-breach-2026-07-16) #### [Park West Psychology data breach: what happened and what's at risk](/news/park-west-psychology-data-breach-2026-07-16) A data breach involving Park West Psychology was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) #### [Fall River Municipal Credit Union data breach: what happened and what's at risk](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) A data breach involving Fall River Municipal Credit Union was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [](#) July 14, 2026 [](/news/npcil-data-breach-2026-07-16) #### [NPCIL data breach: World Leaks claims exposure of Kudankulam Nuclear Power Plant files](/news/npcil-data-breach-2026-07-16) A data breach involving NPCIL was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 14, 2026 [View all news](/news) ## Protect your organization Get in touch or book a free demo. [Contact sales](/demo) [Free demo](/demo) ##### Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](/instant-security-score)