Several systems monitoring fuel levels in storage tanks in the US have been breached by suspected Iranian hackers, CNN reported, citing multiple sources.
The automatic tank gauge (ATG) systems were online and not password-protected, and hackers were able to change the display readings on the tanks, although they were unable to change the fuel levels within, and no physical damage or harm has been reported.
However, a hacker with access to an ATG could potentially stop the detection of a gas leak, CNN wrote, citing private experts and US officials.
Iran has a history of targeting ATGs, making it the prime suspect in these breaches, but sources warned CNN that the hackers left little evidence to allow definitive identification.
Iranian hacking groups have interfered with multiple US infrastructure systems online, which interact with oil and gas sites and water systems. Many infrastructure operators have not properly secured their systems, CNN wrote.
History of cyberattacks lead to warnings to secure systems
Cybersecurity researchers and the federal government have encouraged operators to secure their systems properly.
In 2015, mock ATG systems were put online and were targeted by a pro-Iran group. In 2021, Sky News cited internal documents from the Islamic Revolutionary Guard Corps (IRGC) singling out ATGs as a potential cyberattack target.
After the October 7th massacre, IRGC-affiliated hackers breached US water utility systems and displayed anti-Israel messages on equipment used to manage water pressure.
Since the war began, Iran-linked hackers have caused disruptions at US oil and gas and water sites, and delayed shipping at a medical device maker, Stryker.
An Iranian regime-backed hacker group, Handala, leaked the private emails of FBI Director Kash Patel.
However, Handala has often overstated its accomplishments. After leaking Patel’s emails, it claimed to have broken into the FBI’s systems. However, the only breach was into Patel’s years-old Gmail emails, CNN reported.
Handala has also attacked Israeli officials as well as IDF soldiers.
A target list of a few dozen IDF Egoz commando unit veterans and reservists was published on Sunday, with Handala claiming they had exposed the identities of 60 senior officers.
While the hacktivist group claimed they had exposed 60 senior Egoz officers, the 48 men they presented appeared to be veterans and reservists. Many openly advertised their past affiliation with Egoz on social media, and according to their LinkedIn profiles, they did not serve beyond their mandatory service. The most senior seen by The Jerusalem Post was an NCO. None appeared to be officers, and they had already established careers outside the military.
On April 25, Handala had published a similar “expose” of 100 “senior officers” and “secret agents” ostensibly belonging to the Maglan unit. The group also targeted US military personnel last Monday, claiming to publish a list of US Navy officers, and on April 28, the names of over 2,000 Marines deployed to the Middle East were released.
Michael Starr contributed to this report