CRIME

US pipeline company halts operations after cyberattack

May 8, 2021, 12:26 PM
FILE - In this Sept. 8, 2008 file photo traffic on I-95 passes oil storage tanks owned by the Colon...
FILE - In this Sept. 8, 2008 file photo traffic on I-95 passes oil storage tanks owned by the Colonial Pipeline Company in Linden, N.J. A major pipeline that transports fuels along the East Coast says it had to stop operations because it was the victim of a cyberattack. Colonial Pipeline said in a statement late Friday that it “took certain systems offline to contain the threat, which has temporarily halted all pipeline operations, and affected some of our IT systems.” (AP Photo/Mark Lennihan, File)
(AP Photo/Mark Lennihan, File)

WASHINGTON (AP) — A U.S. energy company says a cyberattack forced it to temporarily halt all operations on a major pipeline that delivers roughly 45% of all fuel consumed on the East Coast.

Colonial Pipeline said the attack took place Friday and also affected some of its information technology systems. The company transports gasoline, diesel, jet fuel and home heating oil from refineries primarily located on the Gulf Coast through pipelines running from Texas to New Jersey.

The Alpharetta, Georgia-based company said it hired an outside cybersecurity firm to investigate the nature and scope of the attack and has also contacted law enforcement and federal agencies.

“Colonial Pipeline is taking steps to understand and resolve this issue,” the company said in a late Friday statement. “At this time, our primary focus is the safe and efficient restoration of our service and our efforts to return to normal operation. This process is already underway, and we are working diligently to address this matter and to minimize disruption to our customers and those who rely on Colonial Pipeline.”

Oil analyst Andy Lipow said the impact of the attack on fuel supplies and prices depends on how long the pipeline is down. An outage of one or two days would be minimal, he said, but an outage of five or six days could causes shortages and price hikes, particularly in an area stretching from central Alabama to the Washington, D.C., area.

Lipow said a key concern about a lengthy delay would be the supply of jet fuel needed to keep major airports operating, like those in Atlanta and Charlotte, North Carolina.

The precise nature of the attack was unclear, including who launched it and what the motives were. A Colonial Pipeline spokeswoman declined to say whether the company had received a ransom demand, as is common in attacks from cyber criminal syndicates.

Ransomware scrambles a victim organization’s data with encryption. The criminals leave instructions on infected computers for how to negotiate ransom payments and, once paid, provide software decryption keys. While there have long been fears about U.S. adversaries disrupting American energy suppliers, ransomware attacks are much more common and have been soaring lately.

Mike Chapple, teaching professor of IT, analytics and operations at the University of Notre Dame’s Mendoza College of Business and a former computer scientist with the National Security Agency, said systems that control pipelines should not be connected to the internet and vulnerable to cyber intrusions.

“The attacks were extremely sophisticated and they were able to defeat some pretty sophisticated security controls, or the right degree of security controls weren’t in place,” Chapple said.

Brian Bethune, a professor of applied economics at Boston College, also said the impact on consumer prices should be short-lived as long as the shutdown does not last for more than a week or two. “But it is an indication of how vulnerable our infrastructure is to these kinds of cyberattacks,” he said.

Bethune noted the shutdown is occurring at a time when energy prices have already been rising as the economy re-opens further as pandemic restrictions are lifted. According to the AAA auto club, the national average for a gallon of regular gasoline has increased by four cents since Monday to $2.94.

Colonial Pipeline said it transports more than 100 million gallons of fuel daily, through a pipeline system spanning more than 5,500 miles.
The FBI and the White House’s National Security Council did not immediately return messages seeking comment. The federal Cybersecurity Infrastructure and Security Agency referred questions about the incident to the company.

A hacker’s botched attempt to poison the water supply of a small Florida city raised alarms about how vulnerable the nation’s critical infrastructure may be to attacks by more sophisticated intruders.

Anne Neuberger, the Biden administration’s deputy national security adviser for cybersecurity and emerging technology, said in an interview with The Associated Press in April that the government was undertaking a new effort to help electric utilities, water districts and other critical industries protect against potentially damaging cyberattacks. She said the goal was to ensure that control systems serving 50,000 or more Americans have the core technology to detect and block malicious cyber activity.

Since then, the White House has announced a 100-day initiative aimed at protecting the country’s electricity system from cyberattacks by encouraging owners and operators of power plants and electric utilities to improve their capabilities for identifying cyber threats to their networks. It includes concrete milestones for them to put technologies into use so they can spot and respond to intrusions in real time. The Justice Department has also announced a new task force dedicated to countering ransomware attacks in which data is seized by hackers who demand payment from victims in order to release it.
___
Suderman reported from Richmond, Virginia. AP Economics Writer Martin Crutsinger contributed.

Today’s Top Stories

Crime

Police in Highland Park, Illinois, respond to a shooting at a Fourth of July event....
Eric Levenson, Adrienne Broaddus, Shawn Nottingham and Brynn Gingras, CNN. Mark Jackson

Police have arrested a ‘person of interest’ after a mass shooting at July 4th parade in Highland Park, Illinois

Robert E. Crimo III, a person of interest in a mass shooting at a parade that left six dead and sent more than two dozen people to hospitals, has been taken into custody near Lake Forest, Illinois, authorities said during a brief news conference. Authorities said Crimo was spotted by a North Chicago officer who […]
1 day ago
People leave Field's shopping centre, after Danish police said they received reports of shooting, i...
Kim Norgaard, Pierre Meilhan and Jorge Engels, CNN

Several people killed in Copenhagen mall shooting, police say

shooting at a mall in Copenhagen has left several people dead, local police said Sunday.
2 days ago
Image from the scene of the shooting on South Major street in Salt Lake City (Photo courtesy of SLC...
Chandler Holt

UPDATE: SLCPD arrest two in connection to Sunday’s Ballpark neighborhood shooting

Police received multiple calls regarding shots fired near 1485 South Major Street at around 5:30 a.m. on Sunday July 3, 2022. 
2 days ago
The scene of the shooting at 900 S. 200 West (Photo courtesy of Adam Sotelo)...
Chandler Holt

UPDATE: Shooting on TRAX platform leaves one dead, one injured

Police responded to reports of shots fired on a TRAX platform near 900 South and 200 West at around 10 p.m. on Saturday night.
2 days ago
Herbert Cox statement Reyes election lawsuit...
Mark Jones

State of Utah files lawsuit against pharmaceutical retailers

Three pharmaceutical retailers are facing a lawsuit from the State of Utah. The lawsuit was filed the week of July 1.
4 days ago
draper shooting police...
Mark Jones

Party ban becomes permanent for Airbnb

Airbnb announced this week that it is placing permanent ban on disruptive parties. In April, two people died in a shooting at an Airbnb in Draper.
5 days ago

Sponsored Articles

Tax Harassment...
Jordan Wilcox

The best strategies for dealing with IRS tax harassment | You have options!

Learn how to deal with IRS tax harassment. This guide will teach you how to stop IRS phone calls and letters, and how to handle an IRS audit.
spend a day at Bear Lake...
Bear Lake Convention and Visitors Bureau

You’ll love spending the day at Bear Lake | How to spend a day at Bear Lake

Bear Lake is a place that needs to be experienced. Spend a day at Bear Lake.
Curb Appeal...
Price's Guaranteed Doors

How to have the best of both worlds for your house | Home security and curb appeal

Protect your home and improve its curb appeal with the latest security solutions like beautiful garage doors and increased security systems.
Prescription opioids can be disposed of during National Prescription Take Back Day...
Know Your Script

Prescription opioid misuse | How to protect your family from the opioid epidemic

Studies have shown that prescription opioid misuse has increased since COVID-19. So what do you need to know about these opioids?
national heart month...
Intermountain Healthcare

National Heart Month: 5 Lifestyle Changes to Make Today to Keep You Heart Healthy

Heart disease is the leading cause of death for both men and women. One person dies every 36 seconds in the United States from cardiovascular disease
Joseph Smith Memorial Building...
Temple Square

The Joseph Smith Memorial Building is an icon of Salt Lake City | Why hosting an event at this beautiful location will make you a hero this year

Here's why hosting an event at the iconic Joseph Smith Memorial Building in downtown Salt Lake City will make you a hero this year.
US pipeline company halts operations after cyberattack