IRANIAN threat actors allegedly exploited online-exposed automatic tank gauge systems to tamper with readings at fuel storage tanks serving gas stations in the US, demonstrating Iran’s cyber reach beyond its conventional military engagements, a claim echoed by security observers. The attackers reportedly changed display readings on the tanks but did not alter actual fuel levels, according to CNN in a report published on 15 May 2026 and cited by the article.
Security experts have warned for over a decade about the risks posed by insecure ATG systems that can be hacked or tampered with, and last year’s RSAC Conference 2025 session detailed how such an attack could trigger cascading disruptions to critical infrastructure. Dark Reading notes that there appears to be no significant disruption to fuel-related critical infrastructure in the US at present, though the incident is used to illustrate how geopolitical conflict now spans digital and physical spaces. DHS and CISA were contacted for comment, but neither organisation had responded at press time.