Colonial Pipeline Hack

Isn't anybody alarmed by this or am I just being Chicken Little?


Well, if you're chicken little, maybe some of us are ostriches with our heads in the ground.  My own feeling is that since everything now is computerized, and linked, everything is hackable, which is Very Bad.

Don't know what there is to do but hope sensible people in government and business are paying attention and taking action.  Now i'm putting my head back in the ground.


I've read some stories that it could get very bad in the coming days in terms of gasoline supply. I filled my car up tonight just in case.

https://www.bloomberg.com/news/articles/2021-05-11/n-y-must-wait-on-5-mph-gasoline-flow-once-pipeline-is-reopened

Once they reopen the pipeline, it will take 15 days for gas to reach the New York area.


As I understand it, the supply is there, in storage. Getting it from storage to gas stations fast enough for lines of worried drivers is another matter.


The problem will come as the storage is drawn down and there's nothing to fill it back up again.

I think.


It's close to Memorial Day weekend and I'm guessing folks vaccinated or not will want to hit the road. Remembering gas shortages post Sandy, I suspect there will at least be some price gauging at the pump. 

Will this effect deliveries?  So many pet owners panic bought pet food at the start of the pandemic that Chewy, who usually delivers overnight, was backed up for weeks. Hit pet rescues hard.

Clearly I'm more concerned about pet food than my own cupboard. "Let them eat cake" will not work.


drummerboy said:

The problem will come as the storage is drawn down and there's nothing to fill it back up again.

Remember the Great Gasoline Shortage of 2017?

I don’t, even though the Colonial Pipeline supply to the Northeast was cut off for nearly two weeks because of Hurricane Harvey.


DaveSchmidt said:

drummerboy said:

The problem will come as the storage is drawn down and there's nothing to fill it back up again.

Remember the Great Gasoline Shortage of 2017?

I don’t, even though the Colonial Pipeline supply to the Northeast was cut off for nearly two weeks because of Hurricane Harvey.

 Look here. I'm never gonna be able to start a panic if you post like this.


Meanwhile, in Florida (naturally) - 


The Fed Govt had to issue a warning to people to not fill up plastic bags with gasoline.



ridski said:

Also - do not buy any gasoline from some guy in a pick-up truck with Rubbermaid totes filled with gasoline.


Wasn't planning any road trips but filled the tank as it was getting low. No drama so apparently the sky is not falling.


Looks like the panic only got as far north as VA.


drummerboy said:

bloomberg is reporting that Colonial paid the ransom. that's not good.

https://www.bloomberg.com/news/articles/2021-05-13/colonial-pipeline-paid-hackers-nearly-5-million-in-ransom?srnd=premium

 So is that 5 million in total, or did Colonial sign themselves up for a subscription plan?


PVW said:

So is that 5 million in total, or did Colonial sign themselves up for a subscription plan?

No subscription plan, because it’s Bitcoin and you never know when Elon Musk will say something (like, “Tesla won’t be accepting Bitcoin as payment after all”), suddenly turning $5 million into $3.8 million.


I think the chief executive of Colonial Pipeline should be invited to sit for a Congressional hearing, with Rep. Katie Porter working him over a little, to find out what the heck happened and how they screwed up.


nohero said:

I think the chief executive of Colonial Pipeline should be invited to sit for a Congressional hearing, with Rep. Katie Porter working him over a little, to find out what the heck happened and how they screwed up.

How did they screw up?

Seems like they were hacked due to a software security vulnerability that I’m sure most companies have. Then they made a business decision to pay the ransom because it was cheaper than not operating.


jimmurphy said:

nohero said:

I think the chief executive of Colonial Pipeline should be invited to sit for a Congressional hearing, with Rep. Katie Porter working him over a little, to find out what the heck happened and how they screwed up.

How did they screw up?

Seems like they were hacked due to a software security vulnerability that I’m sure most companies have. Then they made a business decision to pay the ransom because it was cheaper than not operating.

 It's not clear whether the hack was of their pipeline operations, or of business records.  They paid the ransom to get their data back, which suggests the latter.

They shut down the pipeline operations as a "precaution", but then paid the ransom anyway.  So it would be good to find out when and how those decisions were made.


jimmurphy said:

How did they screw up?

Seems like they were hacked due to a software security vulnerability that I’m sure most companies have. Then they made a business decision to pay the ransom because it was cheaper than not operating.

 From the Bloomberg article: "However, Anne Neuberger, the White House’s top cybersecurity official, pointedly declined to say whether companies should pay cyber ransoms at a briefing earlier this week. 'We recognize, though, that companies are often in a difficult position if their data is encrypted and they do not
have backups and cannot recover the data,; she told reporters Monday."

Why do they not have backups? Why could they not recover the data? If its cheaper for them to pay ransom than to make sure their data is backed up and accessible in the face of various disaster scenarios, then there's something broken here. I expect companies running critical infrastructure to have regular planning and drills for all sorts of scenarios -- earthquake, meteor strike destroying data center, civil unrest, etc. When's the last time you heard of Amazon Web Services or Google Search going down due to ransomware attacks?


nohero said:

 It's not clear whether the hack was of their pipeline operations, or of business records.  They paid the ransom to get their data back, which suggests the latter.

They shut down the pipeline operations as a "precaution", but then paid the ransom anyway.  So it would be good to find out when and how those decisions were made.

Fair enough. I guess they are a utility, so some oversight is prudent.


nohero said:

I think the chief executive of Colonial Pipeline should be invited to sit for a Congressional hearing, with Rep. Katie Porter working him over a little, to find out what the heck happened and how they screwed up.

 I would enjoy a cable show hosted by Rep. Katie Porter, which featured a nightly villain in the hot seat. 



In order to add a comment – you must Join this community – Click here to do so.