Internet-Exposed ATGs Become Remote Control Points
The break is the management plane, not the gauge hardware. If an automatic tank gauge is reachable from the internet, it can become a remote control point for tank parameters, alarms, and other operating data, so the damage reaches fuel operations instead of staying inside the device.
CISA, the FBI, NSA, DOE, EPA, TSA, DOT, and USDA now say the malicious activity against U.S.-based ATG systems is ongoing. Their joint fact sheet covers internet-exposed systems used for remote monitoring of fuel levels, temperature, and leak detection across retail, transportation, and other sectors, and says operators need to reduce exposure and tighten third-party access.
That shifts the focus from one-off intrusions to a standing exposure problem. The real risk is any public-facing remote-management path that lets outsiders change what operators trust, even after the original access point is identified.