WASHINGTON—The Department of Homeland Security issued a new security directive for pipeline owners and operators on May 27 after a hack of the Colonial Pipeline disrupted fuel supplies in the southeastern United States for days this month.
“The recent ransomware attack on a major petroleum pipeline demonstrates that the cybersecurity of pipeline systems is critical to our homeland security,” DHS Secretary Alejandro Mayorkas said in a statement.
Owners and operators of critical pipelines will be required to report confirmed and potential cybersecurity incidents to the department’s Cybersecurity and Infrastructure Security Agency (CISA) and designate a cybersecurity coordinator, to be available 24 hours a day, seven days a week, DHS said.
The directive will also require pipeline owners and operators to review current cybersecurity practices and identify any gaps and remediation measures for risks, it said. They must report those results to the Transportation Security Administration, a unit of DHS, and CISA within 30 days.
A ransomware attack forced Colonial Pipeline, which runs from Texas to New Jersey, to shut much of its network for several days earlier this month, leaving thousands of gas stations across the U.S. Southeast without fuel.
Motorists, fearing prolonged shortages, raced to fill their tanks as the outage laid bare the nation’s reliance on a few key pipelines for fuel needs.
The closure of the 5,500-mile system was the most disruptive cyberattack on record, preventing millions of barrels of gasoline, diesel and jet fuel from flowing to the East Coast from the Gulf Coast.
The hackers held Colonial Pipeline’s computer network hostage and successfully extorted millions of dollars in digital currency. The incident has bumped the cybersecurity of critical U.S. infrastructure to the top of the national agenda.
Investigators in the Colonial case say the attack software was distributed by a gang called DarkSide, which includes Russian speakers and avoids hacking targets in the former Soviet Union. U.S. President Joe Biden has said Russia should bear some responsibility since the hacking came from inside its borders.
In the past, the Transportation Security Administration has provided voluntary guidelines on cybersecurity for pipelines.
TSA is considering additional mandatory measures to enhance cybersecurity in the pipeline industry, the DHS statement said.
Recommended Reading
Primergy Solar Secures $588MM for Texas Solar Project
2024-03-11 - Primergy will develop the Ash Creek Solar project in Hill County and signed a power purchase agreement with Microsoft.
Texas Energy Storage Project Lands Exclusive Tax Equity Provider
2024-02-12 - Located near Houston, the 176-megawatt Longbow battery energy storage project is owned by Tokyo Gas America and is being developed by Clean Capital Partners.
EnCap Launches Bildmore to Invest in Hard-to-finance Clean Energy
2024-03-11 - In an effort to support hard-to-finance clean energy projects, EnCap Energy Transition Fund is launching Bildmore, a platform expected to invest in up to 15 third-party battery storage, solar and other energy transition projects per year.
Devon Energy Leads $244MM Funding Round for Fervo Energy
2024-02-29 - The funds will finance Fervo Energy’s next phase of growth as it puts to use oil and gas technology and techniques to scale geothermal energy.
Quaise Energy Raises $21MM Toward Deep Geothermal Operations
2024-03-12 - Quaise Energy will utilize a technique to vaporize rock using high-power microwaves to achieve deep geothermal energy globally.