Tanker Cyberattacks Expose Maritime Systems Risk

16 September 2026

Executive Summary

US authorities are investigating cyberattacks against at least two foreign tankers carrying oil and liquefied natural gas towards American ports, raising concern about cyber risk moving directly into maritime operational systems.

According to US officials cited by the Wall Street Journal, the vessels were targeted while transiting the Strait of Gibraltar in August.

After the ships subsequently reached the Gulf of Mexico, specialist teams involving the US Coast Guard and FBI boarded them.

US authorities said the inspections followed indications that the networks of both vessels had been compromised and were intended to verify the integrity of their:

• Operational technology.
• Information technology.

The identity of whoever conducted the attacks has not been established.

Officials are reportedly examining whether Iran or another adversary could have been responsible, but that remains an investigative possibility rather than a confirmed attribution.

The incident is particularly significant because cyber interference aboard an energy tanker can potentially create physical consequences.

A maritime cyber attack is not simply a data-security event if compromised systems influence navigation, propulsion, cargo handling or vessel safety.

UK Impact

The development is directly relevant to UK businesses because the Strait of Gibraltar is one of the principal maritime gateways between:

• Atlantic shipping routes.
• Mediterranean ports.
• Europe.
• North Africa.
• Suez.
• Middle Eastern trade routes.

UK businesses dependent upon marine transportation should therefore consider cyber resilience as part of cargo and supply-chain risk.

Potential consequences of vessel-system compromise could include:

• Voyage delay.
• Port detention.
• Collision.
• Grounding.
• Cargo damage.
• Pollution.
• Business interruption.
• Salvage costs.
• Liability disputes.

Global Impact

Modern commercial vessels increasingly depend upon interconnected digital systems.

These can include:

• Navigation.
• Engine monitoring.
• Cargo management.
• Communications.
• Positioning.
• Safety systems.
• Port interfaces.

Operational technology creates efficiency but also creates the possibility that a cyber incident crosses from the digital environment into physical operations.

Energy vessels create particular accumulation risk.

An LNG or oil tanker experiencing serious system interference may carry substantial quantities of hazardous cargo.

The incident also raises a broader strategic concern.

Recent Middle Eastern disruption has concentrated attention on physical attacks against ships and maritime infrastructure.

Cyber operations could potentially provide another method of disrupting trade without using missiles, drones or mines.

Our View

Businesses should ensure that maritime supplier due diligence includes cyber resilience.

Companies should ask:

• Does the carrier maintain maritime cybersecurity procedures?
• Are operational and information technology separated?
• Can critical vessel systems operate independently?
• Are software updates authenticated?
• Is remote access restricted?
• Are navigation systems independently verified?
• Are crew trained for cyber incidents?
• Can manual navigation procedures be restored?
• Does the shipowner have a cyber incident-response plan?
• Could a cyber incident invalidate insurance conditions?
• Does cargo insurance respond to cyber-related physical damage?
• Could a compromised vessel be refused port entry?
• Are alternative carriers available?
• Is supply dependent upon a small number of specialist tankers?
• Do logistics continuity plans contemplate vessel cyberattack?

The important distinction is disappearing.

Businesses can no longer treat cyber risk and physical transport risk as separate categories.

A cyberattack on operational technology can become a collision, a fire, a pollution event or a supply-chain interruption.

Risk Indicator: HIGH – MARITIME CYBER, ENERGY & OPERATIONAL TECHNOLOGY

Disclaimer

The information contained within these Market Alerts is provided for general market awareness and informational purposes only. It does not constitute financial, legal, investment, regulatory or insurance advice. Whilst every effort has been made to ensure accuracy at the time of publication using multiple reputable and independently verified sources, geopolitical events, legislation, regulation and market conditions may change rapidly. Readers should obtain appropriate professional advice before acting upon any information contained herein.

Invictus Risk Solutions LLP – Helping organisations stay ahead of emerging risks through informed insight and independent analysis.