U.S. authorities are investigating cyberattacks against two energy tankers bound for Texas, including a massive crude oil carrier headed for Galveston, raising new concerns about the vulnerability of increasingly connected commercial vessels.
The FBI and U.S. Coast Guard dispatched specialized cyber teams to board the two foreign-flagged vessels in the Gulf of Mexico on Aug. 21 and Aug. 24 after receiving indications that their computer networks had been compromised. Authorities said investigators examined both information technology and operational technology systems aboard the ships.
One vessel has been identified as the VL Prosperity, a 1,093-foot Liberian-flagged supertanker capable of carrying approximately 2.3 million barrels of crude oil. The ship left Egypt on Aug. 1 bound for Galveston and was reportedly attacked while transiting the Strait of Gibraltar.
Iranian state media claimed hackers penetrated the vessel’s engine-room, navigation and cargo systems and disrupted communications for approximately 30 hours. U.S. officials have not independently confirmed all those claims. The Coast Guard has confirmed finding malicious cyber activity but has not publicly attributed the attack to Iran. U.S. investigators are examining whether the two incidents are connected and whether Iran or another foreign actor was responsible.
Authorities said there were no reported injuries, environmental impacts, vessel instability or operational disruptions resulting from the incidents.
The attacks nevertheless highlight a growing maritime-security concern: modern vessels increasingly rely on interconnected digital systems controlling navigation, propulsion, steering, ballast and other critical functions. Rear Adm. Amy Grable, commander of Coast Guard Cyber Command, warned that compromising those systems could potentially cause a collision, pollution incident or blockage of a major waterway.
The incidents demonstrate how cyberattacks against ships can move beyond data theft to pose potential physical and economic risks to vessels, crews and ports.