Colonial Pipeline (2021) — Status: resolved

NoteThe source text directly confirms all three elements of the claim: (1) The Colonial Pipeline ransomware attack occurred in May 2021; (2) The DOJ recovered $2.3 million in Bitcoin ransom, announced on June 7, 2021; (3) The pipeline restarted operations after a 6-day shutdown (May 7 attack to May 12-13 restart). The claim's 'Status = resolved (as of 2021-05-12)' is reasonable given the pipeline restarted on May 12, 2021, though the source's publication date is June 7-8, 2021. The temporal alignment is correct: the claim references the restart date (May 12) as the resolution point, and the source confirms this occurred.