Thread by @KimZetter

Ransomware infection at Colonial Pipeline only infected its IT network; but according to source I spoke to it had potential to spread to operational network and even to upstream oil suppliers whose control systems connect directly to Colonial's systems zetter.substack.com/p/ransomware-i…

Colonial’s IT network and process control network are connected to share info about how much fuel each supplier receives and bill them. A “flow computer” on the process network sends info thru a data gateway and firewall to the corporate network, creating potential pathway

Once on control network, hacker could install malware or manipulate data. But Colonial’s control systems also connect to control systems at tank farms that feed fuel to Colonial pipeline. An attacker can potentially pass thru Colonial’s systems to control systems of these farms.

Colonial Pipeline posted update today: "While our mainlines (Lines 1, 2, 3, 4) remain offline, some smaller lateral lines between terminals and delivery points are now operational. We are in the process of restoring service to other laterals...

and will bring our full system back online only when we believe it is safe to do so, and in full compliance with the approval of all federal regulations."
colpipe.com/news/press-rel…

"Over the past 48 hours, Colonial Pipeline personnel have taken additional precautionary measures to help further monitor and protect the safety and security of its pipeline."

BBC has new info about Colonial Pipeline: Ransomware perps took ~ 100GB of data hostage from, locked data on some computers/servers, and are threatening to leak the data to the internet if ransom not paid. Biden has declared state of emergency over it. bbc.com/news/business-…

Fuel is stranded at refineries in Texas and the state of emergency allows oil products to be shipped in tankers to NY. "Unless they sort it out by Tuesday, they're in big trouble. The first areas to be impacted would be Atlanta and Tennessee, then the domino effect goes up to NY"

Oil futures traders are "scrambling to meet demand, at a time when US inventories are declining, and demand - especially for vehicular fuels - is on the rise as consumers return to the roads and the US economy attempts to shake off the effects of the pandemic."