Colonial Pipeline Hackers Stole Single Password, CEO Tells Senate Committee

The head of Colonial Pipeline told U.S. senators that hackers who launched last month’s cyber attack against the company and disrupted fuel supplies to the U.S. Southeast were able to get into the system by stealing a single password. Colonial Pipeline Chief Executive Joseph Blount told a U.S. Senate committee that the attack occurred using a legacy Virtual Private Network (VPN) system that did not have multifactor authentication in place.