Hackers gained entry into the networks of Colonial Pipeline Co. on April 29 2021 through a Virtual Private Network ( #VPN ) account, which allowed employees to securely access the company's computer network Account's password has since been discovered inside a batch of leaked passwords on the dark web.

https://www.bloomberg.com/news/articles/2021-06-04/hackers-breached-colonial-pipeline-using-compromised-password