The Tanker Warning: If Our Energy Imports Are This Vulnerable, Our Connectivity Is a Sitting Duck

OPINION: I have spent my career watching the Big 3 telecom giants treat national connectivity as a profit center rather than a public utility. They promise us seamless integration and cutting-edge security, yet they consistently prioritize shareholder dividends over the structural integrity of the networks we rely on for every single aspect of modern life. While the telecom giants might scoff at a comparison to maritime logistics, a recent security failure in the Gulf of Mexico should serve as a chilling wake-up call for every American consumer.

As TechCrunch first reported, the FBI and the U.S. Coast Guard were forced to board two U.S.-bound oil tankers between August 21 and August 24. The reason? Hackers had reportedly compromised the networks of the vessels, seizing control of critical systems including propulsion, navigation, and cargo. This wasn't a minor glitch or a phishing scam; this was a full-scale takeover of the operational and information technology systems of massive ships designed to transport our energy imports.

CBS News provided a terrifying level of detail regarding one of the vessels, the VL Prosperity. This 333-meter tanker, capable of holding more than 2 million barrels of oil, was compromised on August 7 while traveling from Egypt to the United States. CBS News reports that the attackers interfered with the ship's fuel systems and speed, and the vessel suffered a total loss of communications for over a day.

While the joint statement from the FBI and Coast Guard claims there were no reports of environmental impacts, physical danger to the crew, or operational disruptions, the mere fact that federal agents had to physically board these ships to "ensure integrity" proves that our remote security protocols are a joke. We are relying on "hope" as a strategy for critical infrastructure.

Who is responsible? While the attackers remain officially unidentified, CBS News reports that U.S. officials are currently examining whether the hack was orchestrated by Iran. This follows a pattern of aggression; Iranian-backed hackers have already targeted the mass transit system in Los Angeles, compromised more than 100 water facilities across the U.S., and launched a destructive attack on medical device manufacturer Stryker. CISA has described these attacks as "opportunistic."

Here is the terrifying reality: if the federal government and the operators of our energy supply chain are this vulnerable to "opportunistic" attacks, what makes us think the Big 3 are doing any better with our connectivity infrastructure?

Our telecom giants operate on the same logic as the shipping industry—maximizing efficiency and minimizing cost while layering outdated security patches over sprawling, complex networks. The VL Prosperity incident shows that when a network is compromised, the loss of communication is total and the loss of control is absolute. If a hacker can manipulate the propulsion of a 333-meter tanker, what is stopping a sophisticated actor from crippling the routing protocols of our national fiber backbone or shutting down the cellular grids that power our emergency services?

The Big 3 will tell you they are investing billions in security. But as we saw with the VL Prosperity, the gap between "investment" and "actual security" is where the disaster happens. The federal government's reactive posture—boarding ships after the fact—is exactly how the telecom industry handles breaches: they notify us months later, offer a year of free credit monitoring, and pretend it won't happen again.

We are living through a period of heightened geopolitical instability. With the U.S. and Israel-led war against Tehran—which resulted in the death of Iran's supreme leader in February—the incentive for destructive cyberattacks is at an all-time high. Yet, our critical infrastructure, from the oil tankers in the Gulf to the cell towers in our backyards, remains a playground for opportunistic hackers.

If the feds can't secure the networks on the ships bringing us our oil, they certainly aren't auditing the Big 3's networks with any real rigor. We are one "opportunistic" hack away from a national connectivity blackout that would make a lost communication signal on an oil tanker look like a minor inconvenience. It is time we stop trusting the corporate brochures and start demanding a security architecture that is actually capable of defending the nation.