Cyberattacks Disrupt Two Oil Tankers, Prompting Coast Guard and FBI Boardings
Summary
Coast Guard and FBI personnel boarded two tankers after reported cyberattacks disrupted them. Investigators found evidence of a malicious actor on one vessel but have not established whether the incidents are linked or who was responsible.
Key points
- The VL Prosperity was reportedly attacked on August 7 while traveling toward Galveston; Iranian media alleged hackers interfered with engine, navigation, cargo and communications systems.
- Coast Guard cyber specialists, law enforcement and FBI personnel boarded the VL Prosperity for four days after it reached the Gulf of Mexico.
- A second tanker was boarded on August 24; investigators are still determining whether the incidents are connected.
- Coast Guard Cyber Command said investigators found evidence of a malicious actor on the vessel, but the inspection uncovered nothing suggesting it was unsafe to operate.
- The Coast Guard has not linked the incident to Iran. Responsibility, including any state-actor involvement, remains undetermined.
- A former Coast Guard cyber official cautioned that degrading individual systems enough to hinder safe operation may be more realistic than taking full control of a tanker.
- The article highlights maritime exposure from aging OT systems, satellite communications and connected devices, and notes risks including GPS spoofing and AIS manipulation.
Article Details
- Victim Organization
- VL Prosperity; the second vessel is not named
- Incident Type
- Reported cyberattack disrupting two oil tankers during their voyages
- Operational Impact
- The VL Prosperity was reportedly disrupted. An Iranian news report, citing a crew member, alleged interference with engine coolant flow, engine speed, fuel delivery, navigation and cargo systems, and communications for roughly 30 hours. Investigators found evidence of a malicious cyber actor on the vessel's systems, but the Coast Guard said the inspection uncovered nothing suggesting it was unsafe to operate.
- Claim Status
- alleged
People
Amy GrableCoast Guard Cyber Command commander who said investigators found evidence of a malicious cyber actor after reviewing the vessel's systems.Quinton DuBoseFormer Coast Guard cyber official who cautioned that degrading individual systems was a more realistic risk than hackers seizing full command of a supertanker.
Countries
EgyptOne of the ships, the VL Prosperity, is a Liberian-flagged crude tanker that left Egypt on August 1 en route to Galveston, Texas, per vessel-tracking records cited by CBS News.IranIran’s Mehr News Agency reported on August 20 that the cyberattack had allegedly occurred on August 7 as the tanker passed through the Strait of Gibraltar.United Statesand FBI personnel last month after cyberattacks disrupted the vessels during their voyage toward the United States, according to a CBS News report citing US officials.