US Coast Guard and FBI Investigate Cyberattacks on Tankers Bound for U.S.

The United States is investigating potential cyberattacks on oil and gas tankers, as concerns grow around the threat to maritime safety posed by hackers interfering with vessels’ electronic systems. The incidents have prompted authorities from the U.S. Coast Guard (USCG) and Federal Bureau of Investigation (FBI) to board ships suspected of being compromised.

Incidents and Vessels Involved

The investigations began after indications that two tankers, bound for U.S. ports, had their networks compromised by hackers. The first boarding occurred on August 21 aboard the VL Prosperity supertanker in the Gulf of Mexico, while a second vessel, an unidentified liquefied natural gas carrier, was inspected on August 24, according to a Wall Street Journal report citing an FBI statement.

According to gCaptain, the U.S. authorities boarded two foreign-flagged vessels in response to indications that their networks had been compromised by “foreign cyber actors.” The Coast Guard did not provide further details about the incidents, but suspicions are high given recent tensions and reports of cyber threats targeting the maritime sector.

Details of the VL Prosperity Incident

The VL Prosperity supertanker is currently idling off the Texas coast after arriving in late August. Ship-tracking data shows that it has been in the area since then. A report from Iran’s Mehr News Agency, cited by The Wall Street Journal, claimed that the ship had suffered a major cyberattack while transiting through the Strait of Gibraltar on August 20. The attack reportedly caused its communications to be knocked out for 30 hours, and it also affected engine-room systems, causing changes in engine speed and cooling flow.

The U.S. Coast Guard boarded the VL Prosperity to ensure the integrity of its operational and information technology (IT) systems following indications that its network was compromised. The ship is managed by HMM Ocean Service, a South Korea-based company that acts as the safety and technical manager for the vessel. According to HMM Ocean Service, it has rigorous cyber protocols in place but awaits final investigation reports from U.S. authorities.

Broader Cybersecurity Concerns

The incidents come at a time when global shipping is under increasing strain due to wars and geopolitical rivalries. With vessels increasingly dependent on digital systems for navigation, communications, and other operations, the threat of cyberattacks looms large. As reported by TradeWinds, U.S. government agencies are tracking cyber threats against nearly 20 ships worldwide. The Coast Guard has requested advance notice from vessels that plan to enter U.S. ports if they suspect any compromise in their IT systems.

The maritime sector faces a growing attack surface, according to Mark Douglas, an analyst at Starboard Maritime Intelligence and former New Zealand naval officer. “Vessels’ electronic control systems are increasing vulnerable,” he stated. “The risk is real and needs to be taken seriously by all stakeholders in the shipping industry.”

What This Means for Operators

The cyberattacks highlight the critical need for operators to strengthen their cybersecurity measures. Vessel managers should review existing protocols, ensure regular updates of IT systems, and establish robust procedures for detecting and mitigating potential threats. Additionally, ship owners must remain vigilant about sharing information with authorities and coordinating responses to cyber incidents.

These incidents underscore the importance of collaboration between industry players and government agencies in addressing cybersecurity challenges. By working together, stakeholders can better protect maritime operations from both current and emerging cyber threats.