The attack, which took place in May 2021, involved the Darkside ransomware and resulted in the Georgia-based company temporarily shutting down operations and paying $5 million to the attackers to recover stolen information. Most of the money was recovered, the US announced in June.

In a notification letter sent to the Maine Attorney General’s Office, Colonial Pipeline said that personal information belonging to 5,810 people was compromised in the attack.

“On May 6, 2021, an unauthorized third party acquired certain records stored in our systems,” the company said in the letter.