Archive · 17 Sep 2026
US Investigates Possible Iranian Cyberattacks on Oil Tankers
The United States is investigating possible computer attacks on oil ships.
FBI and US Coast Guard experts checked two tankers traveling toward Texas.
They found signs of harmful cyber activity, but the ships were still operating and their crews were not in physical danger.
One Iranian news agency said the VL Prosperity had been attacked earlier.
It claimed the attackers interfered with engine systems and cut communications for about 30 hours.
The report did not say who carried out the attack.
US officials have not directly accused Iran.
American agencies are also looking into possible Iranian links to cyberattacks on water systems.
These incidents matter because computer problems on ships or at water facilities could affect safety and important services.
FBI and US Coast Guard cyber experts boarded two foreign-flagged oil tankers in the Gulf of Mexico on August 21 and 24.
The inspections followed complaints about network breaches, but investigators found no operational disruption or physical danger to crews.
US Coast Guard cyber officials said they found evidence of malicious cyber activity without directly blaming Iran.
Iran’s Mehr News Agency reported that the VL Prosperity was attacked on August 7, but did not identify the perpetrators.
US agencies are also examining alleged Iranian-linked cyber activity affecting water systems and other critical infrastructure.
- Who
- The FBI, the US Coast Guard, commercial oil tanker crews, and investigators examining possible Iranian-linked cyber activity.
- What
- US agencies investigated network breaches and found evidence of malicious cyber activity on or involving oil tankers, without finding operational disruption or physical danger.
- When
- The tanker boardings occurred on August 21 and 24; Mehr News Agency reported an alleged VL Prosperity attack on August 7.
- Where
- The tankers were boarded in the Gulf of Mexico while heading to Texas; the reported VL Prosperity attack allegedly occurred in the Strait of Gibraltar.
- Why
- To assess possible cyber threats to commercial shipping and investigate suspected attacks on critical infrastructure.
US Investigation
Iranian Media Report
Responsibility for the tanker activity
US Investigation
US agencies have not directly blamed Iran and are investigating the source of the malicious cyber activity.
Iranian Media Report
Iran’s Mehr News Agency reported that the VL Prosperity was targeted, but its report did not identify who was responsible.
Impact on the VL Prosperity
US Investigation
The US inspection account said investigators found no operational disruption or physical danger to crews on the inspected vessels.
Iranian Media Report
Mehr News Agency alleged that hackers altered engine systems and cut communications on the VL Prosperity for around 30 hours.
- Investigating agencies
- Federal Bureau of Investigation and United States Coast Guard
- Boarding dates
- August 21 and August 24
- Vessels inspected
- Two foreign-flagged commercial oil tankers traveling toward Texas
- Reported vessel
- VL Prosperity, a supertanker capable of carrying roughly 2.3 million barrels of oil
- Reported effects
- The Iranian report alleged engine-system interference and about 30 hours without communications
- US findings
- Evidence of malicious cyber activity, but no operational disruption or physical danger to crews
- Related concern
- US agencies are probing alleged Iranian-linked attacks against water systems in at least seven states