Year – 2021

Estimated Economic Losses – Colonial Pipeline paid approximately US$4.4 Million in ransom, alongside broader economic disruption caused by fuel shortages.

Systems Affected – Corporate IT network, billing systems, business infrastructure, and pipeline operations indirectly affected by the shutdown.

Type of Attack – Ransomware Attack | Critical Infrastructure Cyberattack

Suspected Group / Organization – DarkSide ransomware group.

Detailed Working
Attackers accessed Colonial Pipeline’s network through a compromised VPN account and deployed ransomware across corporate IT systems. The company shut down pipeline operations to contain the attack, causing significant fuel supply disruptions across the eastern United States.

Forensic Investigations
Investigators analyzed compromised credentials, network activity, system logs, and ransomware infrastructure. The investigation identified unauthorized VPN access, ransomware deployment, and digital evidence linking the attack to the DarkSide group.