World

U.S. announces new security directives for pipelines after hack

The U.S. Department of Homeland Security issued a new security directive for pipeline owners and operators on Thursday after a hack this month of the Colonial Pipeline disrupted fuel supplies in the southeastern United States for days.

Ransomware attack forced Colonial Pipeline to shut much of its network

A cyberattack earlier this month on Colonial Pipeline forced the company to shut down much of its network, leaving many gas stations in the eastern United States without fuel. (Colonial Pipeline/Reuters)

The U.S. Department of Homeland Security issued a new security directive for pipeline owners and operators on Thursday after a hack of the Colonial Pipeline this month disrupted fuel supplies in the southeastern United States for days.

"The recent ransomware attack on a major petroleum pipeline demonstrates that the cybersecurity of pipeline systems is critical to our homeland security," DHS Secretary Alejandro Mayorkas said in a statement.

Owners and operators of critical pipelines will be required to report confirmed and potential cybersecurity incidents to the department's Cybersecurity and Infrastructure Security Agency (CISA) and designate a cybersecurity co-ordinator to be available 24 hours a day, seven days a week, DHS said.

The directive will also require pipeline owners and operators to review current cybersecurity practices and identify any gaps and remediation measures for risks, it said. They must report these results to the Transportation Security Administration, a unit of DHS, and CISA within 30 days.

Cyberattack led to fuel outages

A ransomware attack forced Colonial Pipeline, which runs from Texas to New Jersey, to shut much of its network for several days earlier this month, leaving thousands of gas stations across the U.S. southeast without fuel.

Motorists, fearing prolonged shortages, raced to fill their tanks as the outage laid bare the nation's reliance on a few key pipelines for fuel needs.

The closure of the 8,900-kilometre system was the most disruptive cyberattack on record, preventing millions of barrels of gasoline, diesel and jet fuel from flowing to the East Coast from the Gulf Coast.

Extorted millions in digital currency

The hackers held Colonial Pipeline's computer network hostage and successfully extorted millions of dollars in digital currency. The incident has bumped the cybersecurity of critical U.S. infrastructure to the top of the national agenda.

Investigators in the Colonial case say the attack software was distributed by a gang called DarkSide, which includes Russian speakers and avoids hacking targets in the former Soviet Union. U.S. President Joe Biden has said Russia should bear some responsibility, since the hacking came from inside its borders.

In the past, the Transportation Security Administration has provided voluntary guidelines on cybersecurity for pipelines.

TSA is considering additional mandatory measures to enhance cybersecurity in the pipeline industry, the DHS statement said.

Add some “good” to your morning and evening.

A variety of newsletters you'll love, delivered straight to you.

Sign up now

now