The CEO of Colonial Pipeline Joseph Blount informed US senators that hackers gained access to one password and were able to hack the system. The attack occurred through a legacy VPN system without multifactor authentication. Blount said that it was a complicated password. The ransom payment, he said, was done in secrecy due to security concerns. The company had spent $ 200 mn in the last five years to develop its IT infra which includes its cybersecurity.