US LNG Cargo Diverted After Suspected Cyberattack on Ship

A US LNG cargo vessel destined for Italy has been diverted after crew aboard its carrier reported a systems failure that they believe may have been caused by a cyberattack, raising further concerns about the vulnerability of digital systems aboard ships.

The Liberia-flagged Vivit Africa LNG, owned by South Korea’s H-Line Shipping and operating on a long-term charter to commodities company Vitol, had loaded its cargo at the Cameron LNG export terminal in Louisiana.

Earlier this month, as the vessel approached the Adriatic, crew members reportedly lost access to some of the ship’s internal control systems.

The LNG carrier subsequently remained off the Italian coast without unloading its cargo. It later abandoned a planned call at the Adriatic LNG terminal near Rovigo and began sailing west toward Algeciras.

The crew reported the incident to classification society Korean Register, and an investigation remains underway.

In an email sent to media outlets, crew members described what they believed to be a serious cyber incident affecting the vessel. “We have determined that the vessel was targeted by cyber attackers prior to berthing at this terminal,” the crew wrote, saying the initial attack was intended to compromise the ship’s control systems.

According to the crew, the attackers “gained temporary control of the steam pressure and safety valve systems” while the LNG carrier was passing through the Strait of Gibraltar.

They further alleged that the vessel’s tank pressure control systems and pressure relief valves were compromised during its transit through the Adriatic. The crew also claimed that the ship’s boil-off gas management cycle was disrupted.

“This disruption significantly increases the risk of tank rupture and explosion,” the email stated.

The claims made by the crew have not been verified.

Italy’s coastguard has provided a more cautious account of the incident. According to the authority, the vessel’s master reported a malfunction affecting systems used to monitor cargo parameters, requiring technicians from the company to intervene. The cause of the malfunction could not be established. The coastguard also issued a navigational warning instructing other vessels to remain clear of the LNG carrier.

The incident comes at a time of increased attention on cybersecurity risks within the maritime industry. In late August, two oil and gas tankers off the US coast were boarded by the US Coast Guard and FBI following suspected cyber incidents. US authorities are also reportedly monitoring nearly 20 vessels around the world over potential security threats.