On Fri, 14 May 2021 15:51:35 -0400, "Mr. Luddite"
wrote:

On 5/14/2021 11:46 AM, Keyser Söze wrote:
Colonial pipeline operators began restarting operations Wednesday
evening but said it would take “several days� for the supply chain to
return and warned some markets could continue experiencing “service
interruptions.� The mass panic caused by gasoline shortages and spiking
prices across the East Coast — nearly 7 in 10 gas stations in North
Carolina, and about half in Virginia and South Carolina, were out of gas
Wednesday evening, according to GasBuddy — highlighted the vulnerability
of aging U.S. energy infrastructure unable to handle 21st-century
threats, even those known about far in advance.

Founded as a joint venture by nine oil companies 59 years ago, *Koch
Industries* currently owns the largest stake in the company.

An outside audit of the Colonial Pipeline’s cyberattack defenses,
delivered to the company more than three years ago, described
“atrocious� information management practices and “a patchwork of poorly
connected and secured systems,� its author told The Associated Press.
“We found glaring deficiencies and big problems,� said Robert F.
Smallwood, whose firm prepared an 89-page report after a six-month
audit. “I mean, an eighth-grader could have hacked into that system.�
Colonial Pipeline operators have been seeking to hire a cybersecurity
manager for more than a month, with 32 applicants on LinkedIn.



I can't verify the accuracy of this but I heard one report that the
"hacking" was actually into Colonial Pipe's financial systems and not
the operations or equipment associated with the pipelines. Tying up
the banking and financial controls of the company is what caused it
to shut down the system. They reportedly paid a five million dollar
ransom to unlock the company's finances and hence, operations.

It makes sense that Koch Industries would be somehow tied to the
pipeline systems. One of the major business areas and products
of Koch and it's subsidiaries is steel piping. One division
built only nuclear graded products. Koch was also heavy into
gas separation systems that are used to provide oxygen, LN2 and
other gases for commercial and medical use.

That actually does make more sense. There is no good reason to have
operational controls on the internet where a hacker could get to them
but if you cut off the suppliers ability to monitor the billing, he is
not giving the product away for free.

It still makes me wonder how bad their backup regimen is that they
couldn't just wipe all of their hard drives and restore them. That
would be my plan if I was ever "ransomed". I might lose a week or
maybe even longer than that if it was a zero day time bomb attack but
I could come up enough from backups to tell them to kiss my ass.