FBI, Coast Guard Board Two Hacked US-Bound Oil Tankers
FBI and Coast Guard agents boarded two US-bound oil tankers after network breaches, including a hack that disrupted VL Prosperity’s controls and communications.
Summary
U.S. Coast Guard cybersecurity teams and FBI agents boarded two U.S.-bound oil tankers in the Gulf of Mexico from August 21 to 24, 2026, after signs that both vessels’ operational and information technology networks were compromised. Hackers reportedly controlled navigation, propulsion and cargo systems aboard at least one ship. The captain, crew and the owner’s shore staff cooperated. The other tanker remains unidentified.
VL Prosperity, a 333-meter tanker carrying capacity for more than 2 million barrels, was compromised August 7 while traveling from Egypt to the United States. Hackers interfered with its speed and fuel systems, and communications failed for more than a day. VesselFinder placed it in the Gulf on September 18. Attribution remains unresolved, but the U.S. is examining Iran. Since the war led by the U.S. and Israel against Tehran killed Iran’s supreme leader in February, Iranian-backed hackers have attacked medical device maker Stryker, Los Angeles mass transit and more than 100 U.S. water facilities following widespread U.S. bombing. CISA called those attacks opportunistic. Authorities found no reported operational disruption, vessel instability, crew danger or environmental damage, but the breaches expose risks across interconnected navigation, cargo and global logistics networks.
Positives
- FBI and Coast Guard teams boarded both tankers from August 21 to 24 to verify their operational and information technology systems.
- The captain, crew and the vessel owner’s shore staff cooperated with federal authorities.
- No operational disruption, vessel instability, crew danger or environmental impact was reported.
Risks & concerns
- Networks aboard both U.S.-bound tankers showed signs of compromise, expanding the incident beyond a single vessel.
- Hackers reportedly controlled navigation, propulsion and cargo systems aboard at least one tanker.
- VL Prosperity suffered speed and fuel interference and lost communications for more than a day after the August 7 breach.
- The second tanker remains unidentified, while attribution for both compromises is unresolved.
- The U.S. is investigating possible Iranian involvement amid attacks on Stryker, Los Angeles transit and more than 100 water facilities.