The FBI confirmed on Monday that the DarkSide hacker gang is responsible for the hack that shut down the Colonial Pipeline on Friday, stealing large amounts of data before locking computers with ransomware and demanding payment.

“The FBI confirms that the Darkside ransomware is responsible for the compromise of the Colonial Pipeline networks. We continue to work with the company and our government partners on the investigation,” the agency said Monday morning.