Energy · USA · 3 min read
Colonial Pipeline: an unused account, a $4.4M ransom and fuel panic
$4.4M
ransom paid within hours
In May 2021, Colonial Pipeline shut down 5,500 miles of fuel pipeline for about six days. Petrol stations across the US East Coast ran dry.
The bill
- $4.4 million ransom paid, confirmed by the CEO.
- Days of halted fuel deliveries and emergency government action.
- A Senate hearing and lasting reputational damage.
How it started
The CEO told the Senate attackers entered through a legacy VPN account protected only by a password — no second factor.
What to do this week
- Close accounts belonging to people who have left.
- Stop staff reusing work passwords on personal sites.
- Add a second factor to every remote access tool.
Next breakdown
Supermarket freezers hacked: tens of millions of euros of food thrown away →