The Darkside ransomware gang provided Colonial Pipeline with a decryption tool following its ransom payment, but the process was so slow that Colonial continued using its own backups for restoration.