https://www.reuters.com/article/us-usa-products-colonial-pipeline/colonial-pipeline-hackers-stole-data-on-thursday-bloomberg-news-idUSKBN2CQ02D

The hackers who caused Colonial Pipeline to shut down on Friday began their cyberattack against the top U.S. fuel pipeline operator a day earlier and stole a large amount of data, Bloomberg News reported citing people familiar with the matter.