CISA Learned of Pipeline Ransomware Attack from FBI, Not Colonial

Colonial Pipeline didn’t notify the Cybersecurity and Infrastructure Security Agency of its ransomware incident, and acting director Brandon Wales doesn’t think they would have if the FBI hadn’t alerted the agency. Senator Rob Portman (R-OH) questioned Wales about the attack during a hearing of the Senate Homeland Security and Governmental Affairs Committee. Committee chair Gary Peters (D-MI) also pressed representatives from the Departments of Commerce and Health & Human Services over what he considered inadequate notifications of their compromise by SolarWinds.

Source:

• CyberScoop: Colonial Pipeline Didn’t Tell CISA About Ransomware Incident, Highlighting Questions About Information Sharing