The Colonial Pipeline Company learned it was the victim of a cybersecurity attack. The company has since determined that this incident involves ransomware. Colonial Pipeline announced on May 8.(Logo quoted from Colonial Pipeline)
In response, they proactively took certain systems offline to contain the threat, which has temporarily halted all pipeline operations, and affected some of the IT systems. Upon learning of the issue, a leading, third-party cybersecurity firm was engaged, and they have launched an investigation into the nature and scope of this incident, which is ongoing. Colonial Pipeline has contacted law enforcement and other federal agencies.
Colonial Pipeline is taking steps to understand and resolve this issue. At this time, their primary focus is the safe and efficient restoration of the service and efforts to return to normal operation.
This process is already underway, and they are working diligently to address this matter and to minimize disruption to our customers and those who rely on Colonial Pipeline.