CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Iranian threat actors compromise US fuel tank monitoring systems via exposed ATG devices

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

Iranian state-sponsored threat actors are alleged to have compromised automatic tank gauge (ATG) systems monitoring fuel levels at US gas station storage tanks, impacting display readings but not actual fuel levels. The incidents leveraged internet-exposed ATG devices lacking password protections, enabling unauthorized access and manipulation of monitoring data. While no disruption to fuel infrastructure has been confirmed, the attacks demonstrate Iran’s expanding cyber capabilities against US critical infrastructure amid ongoing regional geopolitical tensions.

Timeline

  1. 18.05.2026 18:41 1 articles · 12h ago

    Iranian cyber actors compromise US fuel tank monitoring ATG systems

    Threat actors allegedly accessed and modified display readings on automatic tank gauge (ATG) systems monitoring fuel levels at US gas station storage tanks. The compromise leveraged internet-exposed ATG devices lacking password protections, enabling unauthorized access but not altering actual fuel levels. Iran is suspected due to its historical targeting patterns and ongoing regional conflict, though forensic attribution remains inconclusive. No disruption to fuel infrastructure has been confirmed, but the incident signals Iran’s expanding cyber reach into US critical infrastructure amid geopolitical tensions.

    Show sources
    Open in new tab

Information Snippets

  • Threat actors allegedly accessed ATG systems that monitor fuel levels in US gas station storage tanks by exploiting devices exposed to the internet without password protections.

    First reported: 18.05.2026 18:41
    1 source, 1 article
    Show sources

  • Attackers modified display readings on the compromised ATG systems but did not alter actual fuel levels in storage tanks.

    First reported: 18.05.2026 18:41
    1 source, 1 article
    Show sources

  • Iran is suspected as the perpetrator due to its historical targeting of gas tank systems and ongoing conflict with the US and Israel, though forensic attribution remains inconclusive.

    First reported: 18.05.2026 18:41
    1 source, 1 article
    Show sources

  • The incidents occurred amid volatile oil prices and elevated global fuel prices, influenced by regional geopolitical instability, including the closure of the Strait of Hormuz.

    First reported: 18.05.2026 18:41
    1 source, 1 article
    Show sources

  • US government warnings from the prior month indicated Iran-affiliated actors were disrupting critical infrastructure via attacks on internet-exposed operational technology (OT) devices across multiple sectors.

    First reported: 18.05.2026 18:41
    1 source, 1 article
    Show sources

  • Security experts emphasize that critical infrastructure defenders must prioritize mitigating basic exposure risks such as internet-facing OT devices, weak access controls, and poor network segmentation to reduce operational impact.

    First reported: 18.05.2026 18:41
    1 source, 1 article
    Show sources