Two commercial vessels traveling toward the United States were boarded by U.S. authorities last month after officials received indications that their computer networks had been compromised. The U.S. Coast Guard and FBI carried out the unusual inspections in the Gulf of Mexico on August 21 and August 24, examining the ships’ information technology and operational systems. The incidents have drawn attention to growing maritime cybersecurity risks facing the global shipping industry, particularly as tensions between the United States and Iran have increased.
According to the FBI, joint Coast Guard FBI teams boarded the two foreign flagged vessels after receiving information that the networks of both ships had potentially been breached. The Coast Guard separately said that foreign cyber actors were involved in the August 21 incident, but neither agency identified the suspected attackers or publicly explained exactly how the networks were compromised. Authorities have also provided limited information about the second vessel and have not publicly attributed either incident to a specific government or organization.
U.S. Vessel Boardings Highlight Maritime Cybersecurity Risks
One of the vessels has been identified by maritime security experts and other reports as the Liberian flagged VL Prosperity, a large crude oil tanker that was traveling toward the Texas coast. Vessel tracking information has placed the ship near Galveston. U.S. officials confirmed that the Coast Guard and FBI inspected the vessel after concerns emerged about its network security. The investigation involved specialists examining both the ship’s operational technology and conventional information technology systems, with the aim of determining whether the systems remained secure.
The VL Prosperity had already attracted attention because Iranian state linked media reported an alleged cyberattack against the tanker in August. Mehr News Agency said the vessel experienced a lengthy communications outage while traveling through the Strait of Gibraltar. The report, citing an unnamed crew member, alleged that attackers had reached systems connected to parts of the ship’s machinery and fuel operations. Those claims have not been independently confirmed by U.S. authorities, and officials have not publicly said that Iran was responsible for the incident.
The distinction is important because the investigation is taking place against a wider backdrop of cyber incidents and geopolitical tensions. Reports in recent months have raised concerns about cyber operations connected to the conflict between Washington and Tehran, but the U.S. government has not publicly attributed these particular vessel intrusions to Iran. The available information therefore points to a confirmed investigation into compromised networks, while the identity and motivation of the attackers remain unresolved.
The incidents also illustrate why maritime cybersecurity has become an increasingly important issue for governments and shipping companies. Modern commercial vessels depend on interconnected digital systems for navigation, communications, cargo management, machinery monitoring and other routine operations. A successful intrusion can therefore create risks that go beyond stolen information, particularly if attackers gain access to systems involved in the physical operation of a vessel.
The U.S. Coast Guard has been strengthening its approach to this problem. New cybersecurity regulations for the U.S. Marine Transportation System took effect in July 2025 and established baseline requirements intended to help identify, prevent and respond to cyber threats. Among other measures, the rules require covered organizations to maintain cybersecurity plans and designate personnel responsible for cybersecurity. The Coast Guard has also developed additional guidance for assessing cyber risks and responding to incidents.
That work has continued in 2026. In August, the Coast Guard announced the creation of an Office of Maritime Cybersecurity Policy, describing it as a central office for developing and implementing policies governing cybersecurity across the Marine Transportation System. The move reflects the increasing importance of operational technology, which connects digital networks to physical equipment and processes used throughout maritime transportation.
Maritime Cybersecurity Becomes a Wider Security Concern
The Coast Guard has also emphasized that cyber incidents involving vessels and port infrastructure need to be reported and investigated because disruptions to maritime systems can have broader consequences. Ports, tankers, cargo ships and other vessels form part of a highly interconnected transportation network. A serious cyber incident affecting one part of that network could potentially create delays or other disruptions even when there is no physical damage.
At the same time, the August boardings do not appear to have resulted in reports of serious physical harm. The Associated Press reported that authorities found no reports of vessel instability, danger to crew members or environmental damage related to the incidents. The crews cooperated with investigators, while specialists assessed the condition of the affected systems. That information suggests the immediate focus of the operations was investigation and containment rather than responding to a maritime disaster.
The cases nevertheless demonstrate how cybersecurity concerns can follow a vessel across international waters and eventually become a U.S. national security issue. A ship can be registered in one country, managed by a company in another, carry cargo connected to several markets and travel through multiple jurisdictions before reaching an American port. That international structure can make determining responsibility and coordinating investigations particularly complicated.
For now, several key questions remain unanswered, including who was behind the suspected intrusions, how the attackers gained access and whether the two incidents were connected. U.S. agencies have not publicly released enough technical information to establish those details. What is clear is that authorities considered the suspected network compromises serious enough to send specialized Coast Guard and FBI personnel aboard commercial vessels approaching the United States.
The investigations therefore serve as another reminder that maritime security is no longer limited to physical threats. As ships become increasingly dependent on interconnected digital systems, governments and shipping companies are placing greater emphasis on protecting those networks. The two August incidents remain under investigation, but they have already highlighted the growing importance of maritime cybersecurity in protecting commercial shipping and the infrastructure that supports international trade.
