joining us is nbc security correspondent ken dilanian. good evening, ayman. darkside used an unused vpn account that had a single password, not the two-factor authentication that we need to access our nbc accounts from home. he said it was a complicated password, not a colonial 123 type password. but he said the company did not have a ransom plan despite spending an average of $40 million a year on cybersecurity. he says his company now complies with the latest cybersecurity standards ordered last month by the transportation department. he recounted how colonial shut down its pipeline 15 minutes after it learned it had been breached because the company didn t know whether it was only the corporate i.t. systems or whether it was the pipeline operating systems that had already been compromised. then he described, u.s. heard there, making the decision to pay the ransom the next day,