WASHINGTON — The U.S. has recovered millions of dollars in cryptocurrency ransom paid to the perpetrators of the cyberattack on Colonial Pipeline Co. last month that temporarily halted fuel supplies across the U.S. East Coast, according to a person familiar with the matter.
Justice Department officials declined to comment. The person who discussed the issue asked not to be identified ahead of the announcement. CNN earlier reported that millions in ransom had been recovered.
The ransomware attack caused fuel shortages at gasoline stations in several states and even affected operations by some airlines and airports. It was part of an increasing trend of such acts against critical infrastructure that is posing an early test of President Joe Biden’s administration.
In the attack last month, Colonial Pipeline ended up paying hackers -- a Russia-linked cybercrime group known as DarkSide -- $4.4 million in cryptocurrency in order to help restore its operations.
U.S. intelligence and law enforcement officials say stopping hacking attacks has become a national security priority, and the issue has raised tensions between the U.S. and Russia. Biden plans to bring up hacking attacks when he meets with Russian President Vladimir Putin next week, White House press secretary Jen Psaki said.
The message at the one-on-one meeting in Geneva on June 16 will be that “responsible states do not harbor ransomware criminals, and responsible countries must take decisive action against those ransomware networks,” Psaki said. Putin has denied knowing about or being involved in ransomware attacks.
Brazilian-based JBS SA, the world’s largest meat processor, restarted beef production last week after a ransomware attack forced it to halt operations across the globe.
