Colonial Pipeline Chief Rejects CISA's Help, Says Has Plenty Of Private Sector Expertise

摘要

Pipeline operator Colonial Pipeline, which suffered a significant ransomware attack in May, is working with top cybersecurity firms to help the company in its response and recovery to the attack and doesn’t need similar services from the government, the company’s top executive told a House panel on Wednesday. “Almost immediately” after Colonial Pipeline realized on May 7 that it was the victim of a ransomware attack, the company reached out to the Mandiant division of FireEye [FEYE] to help with the incident response and then two other cybersecurity firms as well, Joseph Blount, the company’s CEO, told the House Homeland Security Committee. Later, the company also hired Dragos and Black Hills Information Security with the response, Blount said.