ENER Breaking: Alpharetta based Colonial Pipeline shuts down gas lines after cyberattack - FBI says Russia Russia Russia

jward

passin' thru
looks like they're still pushing the idea that the "darkside" ransomware group is behind it, even to the extent of hyping that they have a total of three sources for their off the record suppositions :: eye roll :: the post #85 also made the point of stressing this hacker group was known to avoid targeting post Soviet countries or some such. . .
..thus far, darkside has not returned the calls inquiring into this matter..




reuters.com

Top U.S. fuel pipeline operator pushes to recover from cyberattack
Reuters

4-5 minutes


Holding tanks are seen at Colonial Pipeline's Linden Junction Tank Farm in Woodbridge, New Jersey, U.S. in an undated photograph. Colonial Pipeline/Handout via REUTERS.

Top U.S. fuel pipeline operator Colonial Pipeline worked on Sunday to recover from a ransomware cyberattack that forced it to shut down on Friday and sparked worries of a spike in retail gasoline prices.
Colonial said on Saturday it was "continuing to monitor the impact of this temporary service halt" and to work to restore service. It did not give an estimate for a restart date and declined further comment on Sunday.
The incident is one of the most disruptive digital ransom operations ever reported and has prompted calls from American lawmakers to tighten protections for critical U.S. energy infrastructure against hackers. read more
Colonial moves 2.5 million barrels per day of gasoline and other fuels from refiners on the Gulf Coast to consumers in the mid-Atlantic and southeastern United States.

Its 5,000 mile (8,850 km) network serves major U.S. airports, including Atlanta's Hartsfield Jackson Airport, the world's busiest by passenger traffic.
Retail fuel experts including the American Automobile Association said an outage lasting several days could have significant impacts on regional fuel supplies, particularly in the U.S. Southeast.

While the U.S. government investigation is in the early stages, a former U.S. official and two industry sources said the hackers are likely a professional cybercriminal group and that a group dubbed "DarkSide" was among potential suspects.
DarkSide is known for deploying ransomware and extorting victims while avoiding targets in post-Soviet states. Ransomware is a type of malware designed to lock down systems by encrypting data and demanding payment to regain access.

Cybersecurity firm FireEye (FEYE.O) has also been brought in to respond to the attack, according to the two industry sources. FireEye declined to comment.
Colonial has said it was working with a "leading, third-party cybersecurity firm," but did not name the firm.
Bloomberg News, citing people familiar with the matter, reported late on Saturday that the hackers are part of DarkSide and took nearly 100 gigabytes of data out of Colonial's network on Thursday ahead of the pipeline shutdown. read more

Messages left with the DarkSide hackers were not immediately returned. The group's dark web site where hackers regularly post data about victims made no reference to Colonial Pipeline.


BIDEN BRIEFED ON HACK

President Joe Biden was briefed on the cyberattack on Saturday morning, the White House said, adding that the government was working to try to help the company restore operations and prevent supply disruptions.
Another fuel pipeline serving the same regions carries a third of what Colonial does. Any prolonged outage would require tankers to transport fuels from the U.S. Gulf Coast to East Coast ports.

The privately held, Georgia-based company is owned by CDPQ Colonial Partners L.P., IFM (US) Colonial Pipeline 2 LLC, KKR-Keats Pipeline Investors L.P., Koch Capital Investments Company LLC and Shell Midstream Operating LLC.
Gasoline futures and diesel futures on the New York Mercantile Exchange rose on Friday after the outage was reported. In previous Colonial outages, retail prices have risen substantially, if briefly.

Oil refining companies contacted by Reuters on Saturday said their operations had not yet been impacted. Some were monitoring developments and working to find alternative transport for customers.
Our Standards: The Thomson Reuters Trust Principles
 
Last edited:

Millwright

Knuckle Dragger
_______________
Oil refining companies contacted by Reuters on Saturday said their operations had not yet been impacted. Some were monitoring developments and working to find alternative transport for customers.

This is where it could get sticky.

How much of production goes down that pipeline?

Refineries cannot shut down or want to avoid it in a large way.

I bet storage tanks are being filled everywhere.

Even filling tankers and parking them offshore is an option.
 

Millwright

Knuckle Dragger
_______________
Colonial’s pipeline transports 2.5 million barrels each day, taking refined gasoline, diesel fuel and jet fuel from the Gulf Coast up to New York Harbor and New York’s major airports.

Tanker trucks are about 10,000g, rail cars-35,000g.

That's a lot of rescheduling to move 2.5mil gallons per day.

I wonder if Warren Buffet can do it?
 

rob0126

Veteran Member
This is where it could get sticky.

How much of production goes down that pipeline?

Refineries cannot shut down or want to avoid it in a large way.

I bet storage tanks are being filled everywhere.

Even filling tankers and parking them offshore is an option.

Tankers would have to make that long trip around florida.

And a shortage of truck drivers wont speed this up at all.

Delays are inevitable unless this was preplanned with parked tankers ready to roll since friday?

Would they risk sending by rail?

No hacker group has taken any credit yet.

Things just dont add up.
 
Last edited:

Lilbitsnana

On TB every waking moment
Better pray that the farmers have gotten wind of this and are able to finish planting. I think we'll be okay in the Midwest but TX and CA will be hard hit.

None of the Colonial pipeline fuels go to California, so farmers in Cali won't be affected at all from this particular event.
 

bobfall2005

Veteran Member
Ransomware makes very little sense.
Your smart enough to do this, your smart enough to know you will hunted forever. Uncle will Never let this go.
Ransomware is a something to keep the sheep claim. Or something that avoids a war.
 

jward

passin' thru
No one with discernment will take the reports of ransome ware at face value. Though, if you factor in how many "hacker" groups are state sponsered or alfalfabyte type groups, the credibility does increase.

I remain more concerned about "whomever" doubling down and hitting our water harder.
I also remain interested in knowing what, if any, links are made tween this incident and the
earlier spill/liabilities.
Ransomware makes very little sense.
Your smart enough to do this, your smart enough to know you will hunted forever. Uncle will Never let this go.
Ransomware is a something to keep the sheep claim. Or something that avoids a war.
 

Lilbitsnana

On TB every waking moment
Ransomware makes very little sense.
Your smart enough to do this, your smart enough to know you will hunted forever. Uncle will Never let this go.
Ransomware is a something to keep the sheep claim. Or something that avoids a war.

Unless Uncle is connected to it, gotta get those Progressive, Green New deal, destroy the US/whites/conservatives funds/end results from somewhere. :whistle:
 

Coulter

Veteran Member
And I tried to warn family and friends about shortages last spring, especially with the TP and they weren't worried about it and two weeks later they were relegated to using paper towels and newspapers to wipe their butts with, and bitching up a storm about hoarders on social media. Well if I'm going to be stuck working from home for the unknown future and I use my employers bathroom twelve times a day, that means I need to buy more than the usual amount because now I'm using my bathroom twelve plus times a day.
What?
 

jward

passin' thru
in this case thus far it would look more like "something that justifies a war" imho.

Ransomware makes very little sense.
Your smart enough to do this, your smart enough to know you will hunted forever. Uncle will Never let this go.
Ransomware is a something to keep the sheep claim. Or something that avoids a war.
 

wait-n-see

Veteran Member
Better pray that the farmers have gotten wind of this and are able to finish planting. I think we'll be okay in the Midwest but TX and CA will be hard hit.

The pipeline originates from Texas and ships gas east to other states.

Texas will not be hit at all except for rising prices as a result of the potential shortage in the eastern and southern parts of the country.
 

rob0126

Veteran Member
Went to the local gas station in my town to top off.

Lady said yesterday her boss told her to limit gas purchases to 20.00.

But her boss just recently called and said to lift that limit.

So my guess is that they think all is well at the moment.

Now you know what to expect if a delay like this happens again.

Im still gonna top off gas cans tomorrow.
 

TxGal

Day by day
Gas prices near us in the boonies haven't changed yet. Down in Huntsville we paid $2.55 for regular today, last week was $2.48. Given what people are reporting in other areas, we're not complaining (yet).
 

Millwright

Knuckle Dragger
_______________
Part of that pipe line is about 1000 yards from my house.

Don't do it. :lol:

R94a7a5a0998b9a45dd134c24ef1fb724
 

DazedandConfused

Veteran Member
Don't do it. :lol:

R94a7a5a0998b9a45dd134c24ef1fb724
They had to dig up part of the line a few years ago for a repair two lines running together side by side each about 4 Ft in dia and buried at 20 ft down.
They have been putting in a new line in the same right away the new one is much smaller made 18" in dia I think that line is running NG .
 

annieb

Senior Member
https://www.reuters.com/business/energy/top-us-fuel-pipeline-operator-pushes-recover-cyberattack-2021-05-09/
The White House was working closely with top U.S. fuel pipeline operator Colonial Pipeline on Sunday to help it recover from a ransomware attack that forced the company to shut a critical fuel network supplying populous eastern states.

The attack is one of the most disruptive digital ransom schemes reported and has prompted calls from American lawmakers to strengthen protections for critical U.S. energy infrastructure from hacking attacks.

Commerce Secretary Gina Raimondo said the pipeline fix was a top priority for the Biden administration and Washington was working to avoid more severe fuel supply disruptions by helping Colonial restart as quickly as possible its more than 5,500-mile (8,850 km) pipeline network from Texas to New Jersey.

“It’s an all hands on deck effort right now,” Raimondo said on CBS’ “Face the Nation” program. “We are working closely with the company, state and local officials, to make sure that they get back up to normal operations as quickly as possible and there aren’t disruptions in supply.”

Colonial said on Sunday its main fuel lines remain offline but some smaller lines between terminals and delivery points are now operational. Neither Raimondo nor the company gave an estimate for a full restart date and Colonial declined further comment on Sunday.

U.S. gasoline futures jumped more than 3% to $2.217 a gallon, the highest since May 2018, as trading opened for the week and market participants reacted to the closure.

Colonial transports roughly 2.5 million barrels per day of gasoline and other fuels from refiners on the Gulf Coast to consumers in the mid-Atlantic and southeastern United States.

Its extensive pipeline network serves major U.S. airports, including Atlanta's Hartsfield Jackson Airport, the world's busiest by passenger traffic.

A Charlotte Douglas International Airport spokesperson said the airport had supply on-hand and was "monitoring the situation closely," adding that the complex is supplied by another major pipeline as well as Colonial.

Retail fuel experts including the American Automobile Association said an outage lasting several days could have significant impacts on regional fuel supplies, particularly in the southeastern United States.


During previous Colonial outages, retail prices in southeastern states have risen substantially.

Offices of governors in several of the U.S. states most vulnerable to fuel shortages - including Tennessee, Georgia and Maryland - were not immediately available for comment.

CYBERCRIMINALS SUSPECTED

While the U.S. government investigation is in the early stages, a former U.S. official and three industry sources said the hackers are suspected to be a professional cybercriminal group called DarkSide.

DarkSide is one of many ransomware gangs extorting victims while avoiding targets in post-Soviet states. The groups gain access to private networks, encrypt files using software, and often also steal data.

They demand payment to decrypt the files and increasingly ask for additional money not to publish stolen content.

In the Colonial attack, the hackers took more than 100 gigabytes of data, according to a person familiar with the incident.


As the FBI and other government agencies worked with private companies to respond, the cloud computing system the hackers used to collect the stolen data was taken offline Saturday, the person said.

Colonial's data did not appear to have been transferred from that system anywhere else, potentially limiting the hackers' leverage to extort or further embarrass the company.

Cybersecurity firm FireEye (FEYE.O) is among those dealing with the attack, industry sources said. FireEye declined to comment. Colonial said it was working with a "leading, third-party cybersecurity firm," but did not name the firm.

Messages left with the DarkSide hackers were not immediately returned. The group's dark website, where hackers regularly post data about victims, made no reference to Colonial Pipeline.


Colonial declined to comment on whether DarkSide hackers were involved in the attack, when the breach occurred or what ransom they demanded.

BIDEN BRIEFED ON HACK

President Joe Biden was briefed on the cyberattack on Saturday morning, the White House said, adding that the government was working to try to help the company restore operations and prevent supply disruptions.

U.S. Senator Bill Cassidy, a Republican from Louisiana who sits on the Energy Committee, said lawmakers are prepared to work more with privately held critical infrastructure companies to guard against cyberattacks.


"The implication for this, for our national security, cannot be overstated. And I promise you, this is something that Republicans and Democrats can work together on," he said on NBC's "Meet the Press."

Another fuel pipeline serving the same regions carries a third of what Colonial does. Any prolonged outage would require tankers to transport fuels from the U.S. Gulf Coast to East Coast ports.

The Federal Motor Carrier Safety Administration is issuing a temporary hours of service exemption to truckers transporting refined products to 17 southern and east coast states including Alabama, Delaware, Florida, Georgia, New Jersey and New York.

Complicating the fallback plans, according to one industry source familiar with the federal response, was that the ranks of fuel-truck drivers for the main road transportation companies, which could pick up some of the pipeline volume, are down by 25% or more because of coronavirus infections.


Oil refining companies contacted by Reuters over the weekend said their operations had not yet been impacted. Some were working to find alternative transport for customers.

The privately held, Georgia-based company is owned by CDPQ Colonial Partners L.P., IFM (US) Colonial Pipeline 2 LLC, KKR-Keats Pipeline Investors L.P., Koch Capital Investments Company LLC and Shell Midstream Operating LLC.
 

SmithJ

Veteran Member
This does not sound hopeful for a quick resolution:

“Tanker truck drivers will be allowed to work longer hours after a federal emergency declaration on much of the East and Gulf Coasts in response to the pipeline shutdown, the US Department of Transportation said Sunday. The exemption applies to transporting gasoline, diesel, jet fuel and other refined petroleum products to Alabama, Arkansas, the District of Columbia, Delaware, Florida, Georgia, Kentucky, Louisiana, Maryland, Mississippi, New Jersey, New York, North Carolina, Pennsylvania, South Carolina, Tennessee, Texas and Virginia.”


Criminal group originating from Russia believed to be behind pipeline cyberattack

(CNN) — A criminal group originating from Russia named "DarkSide" is believed to be responsible for a ransomware cyberattack on the Colonial Pipeline, according to a former senior cyber official.
DarkSide typically targets non-Russian speaking countries, the source said. The attack has led the White House to form an interagency working group over the weekend to prepare for various scenarios, including whether additional steps need to be taken to mitigate any potential impact on fuel supply, a White House official said Sunday.

Bloomberg and The Washington Post have also reported on DarkSide's purported involvement in the cyberattack.
Colonial Pipeline Company said Sunday it is working to develop a restart plan for its pipeline system, which was temporarily shut down to contain the threat.
The company's main lines remain offline, but some smaller lines between terminals and delivery points are now operational, the company said in a statement Sunday, adding that it "will bring our full system back online only when we believe it is safe to do so, and in full compliance with the approval of all federal regulations."
The Department of Energy is leading the federal government response, according to the company, which was also engaged with the FBI and Department of Homeland Security.

Enter your email to sign up for CNN's The Point with Chris Cillizza.

Tanker truck drivers will be allowed to work longer hours after a federal emergency declaration on much of the East and Gulf Coasts in response to the pipeline shutdown, the US Department of Transportation said Sunday. The exemption applies to transporting gasoline, diesel, jet fuel and other refined petroleum products to Alabama, Arkansas, the District of Columbia, Delaware, Florida, Georgia, Kentucky, Louisiana, Maryland, Mississippi, New Jersey, New York, North Carolina, Pennsylvania, South Carolina, Tennessee, Texas and Virginia.

Colonial Pipeline, which transports more than 100 million gallons of gasoline and other fuel daily from Houston to the New York Harbor, according to its website, said it learned of the cyberattack on Friday, causing it to pause operations.
On Sunday, the company also said it is in the process of restoring affected IT systems.

"Over the past 48 hours, Colonial Pipeline personnel have taken additional precautionary measures to help further monitor and protect the safety and security of its pipeline," the latest statement said.
This story has been updated with additional reporting.
Gregory Wallace contributed to this report.
 

Millwright

Knuckle Dragger
_______________
SO....Now all of a sudden it's ALL HANDS ON DECK!!! The administration is soooo worried about this PIPELINE. Anger does not even come close. How dare they. The state department probably sanctioned the hack with Soro's approval. Unbelievable.

This ain't nuthin.

Just wait for the response when we get the dreaded EMP. :D
 

phloydius

Veteran Member
(CNN) —
Tanker truck drivers will be allowed to work longer hours after a federal emergency declaration on much of the East and Gulf Coasts in response to the pipeline shutdown, the US Department of Transportation said Sunday. The exemption applies to transporting gasoline, diesel, jet fuel and other refined petroleum products to Alabama, Arkansas, the District of Columbia, Delaware, Florida, Georgia, Kentucky, Louisiana, Maryland, Mississippi, New Jersey, New York, North Carolina, Pennsylvania, South Carolina, Tennessee, Texas and Virginia.

I agree, this make me think the leadership believes that this is a longer term problem.

From Houston to DC is a 21 hour non-stop trip. So for normal driving, that is 2 Days each way. If they started finding drivers today, and getting them on the road, it would be about 5 days before they got back and were able to do another load.

Where will they find the drivers with what appears to be a shortage of truck drivers?
It will take a unreasonable number of drivers to move a fraction of that fuel deficit instead of the pipeline.
 

Bud in Fla

Veteran Member
SO....Now all of a sudden it's ALL HANDS ON DECK!!! The administration is soooo worried about this PIPELINE. Anger does not even come close. How dare they. The state department probably sanctioned the hack with Soro's approval. Unbelievable.
Is Hunter still associated with the gas industry in Russia? Wonder how the FBI will spin it if he is?
 

Lilbitsnana

On TB every waking moment
I agree, this make me think the leadership believes that this is a longer term problem.

From Houston to DC is a 21 hour non-stop trip. So for normal driving, that is 2 Days each way. If they started finding drivers today, and getting them on the road, it would be about 5 days before they got back and were able to do another load.

Where will they find the drivers with what appears to be a shortage of truck drivers?
It will take a unreasonable number of drivers to move a fraction of that fuel deficit instead of the pipeline.

They will set "priority" locations, I suspect most red state areas will not be high on the list, if they are on the list at all.

DC, military, major airports (maybe; probably private jets/planes only)
 

Raggedyman

Res ipsa loquitur
sit rep from WNC . . . friend in the MAG went on a very long ride today - from the TN line down 40 to 26 to greenville and over to shelby SC then back up . . . reports no gasoline issues and prices stable in SC. as far as I know they are still sitting at 2.85/gal here in WNC - which is where they were when I topped off all vehicles and available gas cans Sat morning . . .
 
Top