
Texas regulators are urging oil and gas companies to reinforce their cybersecurity defenses following reported cyberattacks involving energy tankers bound for the state. Wayne Christian, a commissioner at the Railroad Commission of Texas, called on producers, pipeline operators, and other energy businesses to improve their preparedness against evolving digital threats.
The warning comes as energy infrastructure becomes increasingly connected to the internet and companies expand their use of artificial intelligence (AI). These technologies can create vulnerabilities that hackers may exploit to access proprietary drilling data, compromise industrial systems, or disrupt operations.
In August 2026, U.S. authorities reportedly boarded two foreign-flagged energy vessels bound for the country after indications that cyber actors had compromised their networks. The incidents heightened concerns about potential vulnerabilities across the energy supply chain. Federal officials have not publicly attributed the attacks to a specific country or group.
Earlier this year, the Railroad Commission warned regulated operators about cyber threats targeting internet-connected operational technology, including programmable logic controllers (PLCs). Successful attacks could cause operational interruptions and financial losses across critical infrastructure.
The Cybersecurity and Infrastructure Security Agency (CISA) recommends protecting industrial controllers behind secure gateways and firewalls, reviewing system logs for indicators of compromise, and monitoring suspicious network traffic. Companies using Rockwell Automation controllers are also advised to follow specific security guidance if a potential intrusion is suspected.
Christian emphasized that energy companies must invest in prevention, testing, and continuous monitoring to protect critical infrastructure. As cyber threats evolve alongside AI adoption and industrial connectivity, strengthening digital defenses is becoming an increasingly important component of energy security and operational resilience.