Suspected Iranian hackers accessed internet-exposed gas station tank monitors across multiple U.S. states

U.S. officials believe suspected Iranian hackers broke into fuel-tank monitoring systems at gas stations in several states. The attackers targeted automatic tank gauges, or ATG systems, that were exposed online without passwords and changed displayed readings but reportedly could not alter actual fuel volumes. No physical damage has been reported, but officials warned the access could potentially hide leaks or create other safety and critical-infrastructure risks.
Why it matters: Gas stations and operators using older internet-connected monitoring gear may be at risk right now, especially if devices are reachable online without authentication. Operators should immediately remove ATG systems from direct internet exposure, require passwords, and review logs and display anomalies.

Sources

Over 900 US gas station tank gauge systems exposed to attacks
Sergiu Gatlan 2026.06.05 96% relevant
This is a direct update on the same ATG gas-station tank-monitoring intrusion wave, adding the joint CISA/FBI/NSA advisory, details on likely attack methods, and Shadowserver's count of 1,061 exposed ATG systems globally, including 909 in the U.S.
In Other News: Anthropic Maps AI Threats, Unpatched Comodo Flaw, Palantir Chief Eyed for CISA
SecurityWeek News 2026.06.05 76% relevant
It ties the broader multi-agency U.S. warning on exposed Automatic Tank Gauge systems to the previously reported Iran-linked compromises of gas-station tank monitors and reiterates the immediate mitigation guidance to disconnect exposed systems from the internet.
CISA warns of cyberattacks targeting fuel tank monitoring systems
Lawrence Abrams 2026.06.03 94% relevant
This is a direct government follow-up to the same tank-monitoring intrusion activity previously reported by CNN, adding an official multi-agency advisory, broader sector impact beyond gas stations, and specific attack methods and mitigations. It also notes the activity remains unattributed in the advisory despite earlier reporting pointing to suspected Iranian involvement.
In Other News: Industrial Router Exploitation, CISA KEV Nomination Form, Gas Station Hacking
SecurityWeek News 2026.05.22 100% relevant
This article establishes a distinct critical-infrastructure intrusion story involving suspected Iranian access to exposed gas station ATG systems across multiple states.
← Back to all stories