Hackers breached propulsion system of US-bound oil supertanker VL Prosperity

Hackers managed to gain temporary access to the propulsion system of a fully laden oil supertanker as it neared the Texas coast, US officials have revealed.

The digital intrusion, which targeted the VL Prosperity as it approached Galveston in August, has alarmed military and intelligence agencies. The vessel is a Very Large Crude Carrier—longer than the Chrysler Building is tall and as wide as an American football field—carrying a massive payload of crude oil.

A joint team of FBI and US Coast Guard personnel boarded the ship in late August after it lost communications and authorities detected signs that its networks had been compromised.

What happened on the VL Prosperity?

Investigators found that hackers had established temporary access to the ship's digital propulsion systems. While the intruders breached these operational networks, they did not disrupt the tanker's journey. The FBI said in a statement that there were "no reports of operational disruptions, vessel instability, physical danger to crews, or environmental impacts."

The agencies confirmed they boarded the VL Prosperity alongside a second, unnamed ship in the Gulf of Mexico. The operations were launched "to ensure integrity of the vessel's operational and information technology systems following indications that the networks of both vessels were compromised."

US officials are still investigating how the hackers got in, how long they had access, and who was responsible for the cyberattack. The vessel has remained anchored offshore near Galveston since the boarding.

Why does a propulsion hack matter?

The breach highlights a growing vulnerability for the maritime industry, which has become heavily dependent on internet-linked networks for navigation, engine controls, and communication.

While digital probes of shipping lines are common, physical intrusions into a ship's actual steering or engine systems are exceedingly rare. Alex Soukhanov, a licensed ship captain and director at maritime security firm True North Group, warned that confirmed hacks of physical ship systems carry immense risk.

"These are the largest moving objects in the world transporting the world's economy," Soukhanov said. "We just can't have this type of unauthorised access. Every mariner should be extremely concerned."

Svante Einarsson, head of cyber security at the ship technical advisory firm DNV, said that while losing ship functions is a "worst case scenario" for vessels carrying hazardous cargo, most ships are designed with manual or alternative backup systems to allow crews to maintain control.

What are the security implications?

The incident is part of a broader wave of maritime cyber threats. By September, US government agencies were tracking cyber threats against nearly 20 shipping vessels globally. To manage the risk, the Coast Guard has ordered that any of these flagged ships must provide advance notice before entering a US port.

Because the VL Prosperity was bound for a US port, the incident triggered an immediate jurisdictional response. Security analysts note that while isolated hacks usually only affect local insurance premiums or freight rates, any evidence of a coordinated campaign targeting tankers could push a geopolitical premium into global oil prices.