US government agencies including CISA, FBI, NSA, and the Department of Energy issued a joint warning about active cyberattacks targeting automatic tank gauge (ATG) systems. These internet-exposed devices monitor fuel and liquid storage tanks across critical infrastructure sectors.
ATG systems represent a significant vulnerability in the industrial control landscape. They operate as remote monitoring solutions for tank levels and inventory across petroleum distribution networks, chemical storage facilities, and other essential infrastructure. When exposed to the internet without proper security controls, these devices become entry points for attackers seeking access to downstream systems.
The threat actors exploit weak authentication, unpatched software, and poor network segmentation to compromise ATG systems. Once inside, attackers can gather intelligence on fuel supplies, manipulate readings to cause operational disruption, or pivot to connected systems managing distribution and safety operations. The risk extends beyond data theft to potential physical consequences if tank levels are misrepresented or safety thresholds are altered.
The agencies recommend immediate actions for operators. Organizations should inventory all ATG systems on their networks and assess internet exposure. Implementing network segmentation isolates ATG systems from critical operational technology and enterprise networks. Requiring strong authentication, disabling unnecessary services, and restricting access by IP address reduces attack surface. Patching firmware and software closes known vulnerabilities. Monitoring network traffic for unusual connections provides early detection capability.
Organizations managing fuel distribution, petrochemical storage, or similar infrastructure should treat ATG protection as urgent. These systems lack the sophisticated logging and alerting capabilities of modern IT environments, making compromise difficult to detect. Attackers who gain access maintain persistence with minimal traces.
The joint warning reflects growing concerns about critical infrastructure targeting. ATG systems represent lower-hanging fruit than hardened control systems, yet offer attackers meaningful access to essential services. Operators who prioritize network visibility and access controls reduce risk substantially. Those who leave ATG systems internet-exposed with