WASHINGTON, September 24 — The Coast Guard and the FBI are investigating a series of suspected cyberattacks on oil and gas tankers that have disrupted trade routes across the Atlantic, with investigators examining whether Iran is behind them. The incidents are not theoretical. On August 7, an oil tanker bound for the United States lost access to its communication systems for more than 30 hours.
Then, on September 19, a liquefied natural gas tanker carrying U.S. LNG to Italy was unable to unload its cargo after losing access to its internal control systems. Under the hood, the technical reality is uncomfortable.
Ships run interconnected IT and operations management systems, which means a compromised network can strip a crew of control over the vessel. A crew that cannot safely manage a tanker carrying millions of gallons of crude oil raises the risk of a spill, fire, or explosion.
What the Investigators Found
The FBI and the Coast Guard issued a joint statement on September 16 addressing the alleged cyberattacks on U.S.-bound ships. They explained that they boarded the oil tanker in the Gulf of Mexico in August “to ensure integrity of the vessel’s operational and information technology systems” after evidence of network compromise by “foreign cyber actors.” After completing incident response and remediation, the agencies confirmed there were no immediate threats to vessel stability, crew safety, or the environment. Officials are investigating whether Iran might be behind the attacks.
The Coast Guard and FBI have not named a perpetrator beyond the reference to foreign cyber actors.
The Scale of the Problem
Cyberattacks on the maritime industry are not a rare occurrence. In 2025, the Coast Guard responded to 42 reported cyber incidents affecting U.S. maritime systems, up from 36 incidents in 2024. In collaboration with U.S. Cyber Command, the Coast Guard began executing multiple deployments utilizing its Cyber Protection Team in early December 2025, ranging from Hunt and Incident Response missions to Maritime Interdiction Operations of Dark Fleet vessels using traditional law enforcement tactics.
To address these threats, the Coast Guard on August 31 announced the creation of the Office of Maritime Cybersecurity Policy (CG-MCP) to develop domestic policy and direct compliance and enforcement strategy. If properly staffed, the office has the potential to provide support for American port operators as they navigate a complex threat landscape and new cybersecurity requirements.
Those requirements do not apply directly to foreign-flagged vessels, but the Coast Guard has said it will use its Captain of the Port authority to scrutinize those with poor cybersecurity practices entering U.S. waters.
The Resourcing Question
Port authorities and shipping companies remain responsible for their systems’ security, but the Coast Guard needs sufficient funding, personnel, and capabilities to provide the necessary support in its role as the federal government’s sector risk management agency. Without a competent federal partner, the industry may lack both the information to invest wisely and guidance to identify and mitigate risks.
In February 2025, the U.S. Government Accountability Office warned that the Coast Guard had not fully developed competency requirements for its workforce or assessed gaps between existing capabilities and future needs to accomplish its cyber mission. In June 2026, GAO testified before Congress that the service faces a broader workforce issue and lacks a plan to evaluate its modernization goals.
GAO noted that in a prior modernization reform, the Coast Guard disestablished its modernization oversight office without creating a replacement. Congress should require the Coast Guard to provide a resourcing and implementation plan for CG-MCP and its broader maritime cyber mission, identifying cyber-specific capabilities, personnel, and dedicated funding. The plan should establish a timeline for addressing workforce recommendations in the February 2025 GAO report.
Only when the mission is properly resourced can the Coast Guard ensure nationwide maritime cyber resilience. The detail that matters next is whether the Coast Guard’s new policy office gets the staff and money to match its mandate — and whether investigators can attribute the attacks before another tanker goes dark.
