Tanker Boardings Exposed Maritime OT Isolation Gaps
US authorities confirmed in mid-September that they boarded multiple US-bound energy tankers after signs the ships’ networks had been compromised. On the VL Prosperity, the Coast Guard and FBI spent four days aboard and said they found malicious cyber activity, but no reported operational disruption, vessel instability, crew danger, or environmental impact.
The key lesson is not dramatic sabotage. Maritime plants often carry several vendor-connected control systems, and removable media can bridge an expected air gap if it has touched an infected machine elsewhere; once that path exists, isolation is only a policy, not a barrier. For operators with remote support links or USB-based transfer workflows, the exposure is the shipboard control environment itself, even when no outage has been confirmed.