Global shipping networks are facing severe disruptions. An apparent cyberattack has targeted several energy tankers bound for the United States. The U.S. Coast Guard and FBI are actively investigating the incident. This developing story highlights the increasing vulnerability of maritime infrastructure to cyber threats. The attacks occurred in early August 2026 while vessels were transiting near the Strait of Gibraltar. Federal teams boarded two vessels in the Gulf of Mexico in August to examine their systems.
WHAT HAPPENED:
At least two foreign tankers heading to U.S. ports experienced cyberattacks. The U.S. Coast Guard and FBI confirmed the investigations. The vessels’ crews reported the incidents. There is no immediate danger reported to the crews or the environment. The investigation aims to ensure the integrity of the vessels’ operational and information technology systems. Indications suggest the networks were compromised by foreign actors.
WHERE AND WHEN:
The attacks happened in early August 2026. The vessels were near the Strait of Gibraltar. One tanker was reportedly bound for Galveston, Texas. Federal teams boarded the vessels on August 21 and August 24, 2026.
IMPACT AND SIGNIFICANCE:
These attacks add significant cyber risk to the energy supply chain. This chain already relies on a limited number of major shipping routes. A disruption to onboard technology could affect more than just the ship. It impacts business continuity for companies dependent on the energy transported. The FBI and Coast Guard are examining both IT and operational technology (OT) systems. This includes systems for propulsion, navigation, and cargo operations. The North Carolina Ports Authority also experienced a significant cyberattack on August 4, 2026. This attack disrupted IT systems and slowed operations at the Port of Wilmington, Port of Morehead City, and Charlotte Inland Port. This highlights the vulnerability of critical infrastructure in the logistics sector.
CONTEXT: GROWING MARITIME CYBER THREATS
The maritime sector is increasingly a target for cyberattacks. Supply chain attacks are a dominant pattern in 2026. These attacks exploit trust in vendors and systems. The North Carolina Ports Authority attack is a recent example of this vulnerability. The incident caused a systems-wide outage. It forced a transition to manual gate processing. Operational delays affected port activities and truckers.
Historically, major incidents like the 2017 NotPetya attack on Maersk demonstrated the devastating impact of cyber threats on global shipping. That attack cost Maersk an estimated $300 million. It crippled operations across 130 countries. Ports and terminals shut down. This incident underscored the need for robust cybersecurity.
New regulations like the Dutch Cybersecurity Act, effective July 1, 2026, are pushing for stricter requirements. These laws, aligned with the European NIS2 Directive, extend obligations across the entire supply chain. Shipowners, operators, and suppliers must demonstrate identification and mitigation of cyber risks. This shift makes cybersecurity an integral part of strategy, not just an IT function.
CURRENT SITUATION AND INVESTIGATION
The U.S. Coast Guard and FBI boarded the two tankers on August 21 and August 24. These operations involved law enforcement, cyber protection teams, and FBI cyber action teams. They examined the vessels’ information technology (IT) and operational technology (OT) systems. The goal was to investigate potential compromises by foreign cyber actors.
One of the vessels involved is identified as the VL Prosperity, a Liberian-flagged crude carrier. Iranian news outlets reported that this tanker lost communications for approximately 30 hours. This occurred while it was near the Strait of Gibraltar. Reports also claimed interference with the ship’s machinery and control systems. However, U.S. authorities have not confirmed these specific details.
No attribution for the attacks has been publicly confirmed. U.S. officials are reportedly investigating potential links to state-sponsored actors or the extension of Middle East conflicts into cyber operations.
REACTIONS AND EXPERT COMMENTARY
“The attacks add cyber risk to an energy supply chain already dependent on a small number of major shipping routes,” stated a report analyzing the situation. “A disruption to the technology aboard these vessels could affect more than the ship itself, bringing cybersecurity into business continuity planning for companies that depend on the energy moving through those routes.”
The U.S. Coast Guard stated that the inspections were designed to protect the vessels after indications of network compromise. “The measures were designed to ensure integrity of the vessel’s operational and information technology systems following indications that the vessel’s network were compromised by foreign cyber actors,” according to a joint statement from the Coast Guard and FBI. The agencies also noted that crews and operators cooperated and helped mitigate threats.
Maritime cyber incidents have surged significantly. One report indicated a 103% increase in maritime cyber incidents in 2025 compared to 2024. DDoS, ransomware, and malware infections are the most common types of attacks. This growth rate has more than doubled over the past year.
WHAT’S NEXT
The investigations by the FBI and U.S. Coast Guard are ongoing. Authorities will continue to examine the compromised systems on the affected vessels. They are working to determine the full scope of the attacks and identify responsible parties. Further details are expected as the investigations progress. The maritime industry is urged to remain vigilant and enhance cybersecurity measures.
New regulations and industry guidance, such as the IMO’s cybersecurity guidelines effective mid-2026, aim to bolster resilience. These measures are critical for safeguarding global supply chains from potential disruptions. The incident reinforces the need for continuous monitoring and robust incident response plans across the maritime sector.
Emergency Contact Information:
- In the United States, for cybercrime reporting, contact the FBI’s Internet Crime Complaint Center (IC3) at www.ic3.gov.
- For maritime security concerns, contact the U.S. Coast Guard via their National Command Center.
