Two Texas-bound oil tankers hit by cyberattacks, propulsion-related system reportedly accessed
August 7, 2026 (August to October 2026)
US Coast Guard and FBI teams boarded the tanker VL Prosperity on August 21 and a second tanker on August 24 after indications that both vessels' networks were compromised. Iranian state media reported the VL Prosperity lost communications for more than 30 hours around August 7 near the Strait of Gibraltar. Bloomberg later reported investigators found that hackers accessed a digital system connected to the ship's propulsion, and investigators have not said whether they tried to manipulate it. Crew claims relayed by Iranian media about engine speed and cooling are unverified. The Coast Guard has not attributed the attacks and reported no operational disruption, danger to crew or environmental harm. By September, US agencies were tracking cyber threats against nearly 20 vessels. North Carolina Ports separately reported a cyberattack on August 6 that forced manual operations.
Why it matters
A ship is a floating industrial network. Even partial access to systems linked to propulsion is unusual enough to draw federal boarding teams.
What defenders can take from it
- Maritime operators can request anonymized cyber assistance from the Coast Guard.
- Treat shipboard control networks as OT, with segmentation and strict remote-access rules.