Freight Pulse & Law Update: Hackers Boarded a Tanker's Controls, Non-Domiciled CDL Enforcement Bites, and LNG Sneaks Back Through Hormuz
Three developments are reshaping freight risk this week: cyberattacks are reaching vessel control systems, FMCSA’s non-domiciled CDL restrictions are forcing carrier audits, and LNG shipments are cautiously returning through the Strait of Hormuz.
None of these stories signals a return to normal. Each demands stronger visibility, documented fallback procedures, and tighter coordination across transportation, warehousing, and fulfillment.
What happened to the hacked oil tankers?
Between August 21 and August 24, FBI and U.S. Coast Guard cybersecurity teams boarded two U.S.-bound oil tankers in the Gulf of Mexico after authorities identified compromised onboard networks.
One vessel, the 333-meter VL Prosperity, can carry more than two million barrels of crude. U.S. officials confirmed malicious cyber activity on its systems and investigated possible connections between information technology and operational technology controlling navigation, propulsion, cargo handling, and other critical machinery.
TechCrunch reported that the incident raised concerns about attackers reaching physical freight operations. CBS News reported that communications were allegedly disrupted for approximately 30 hours. U.S. authorities have not publicly confirmed every claim about direct manipulation of propulsion or cargo systems, and investigators have not formally attributed the attack to Iran.
The confirmed facts still matter:
Two tankers had compromised networks.
Investigators found malicious activity aboard the VL Prosperity.
Authorities examined whether IT networks connected to navigation, propulsion, and cargo systems.
Officials reported no crew injuries, environmental damage, vessel instability, or operational disruption requiring emergency intervention.
Why does tanker cyber risk matter to 3PL and warehouse operators?
Because freight security no longer stops at the port gate.
A compromised carrier, terminal, ELD provider, booking platform, or warehouse integration can affect cargo status, routing decisions, release instructions, and customer communications. Third party logistics providers should treat cyber resilience as part of cargo security, not as a separate IT project.
For high-value or regulated shipments, logistics teams should:
Segment operational technology from corporate IT networks.
Review carrier, broker, terminal, and software-provider access.
Require multi-factor authentication for administrative accounts.
Confirm who can change routing, delivery, or release instructions.
Maintain manual fallback procedures for critical loads.
Preserve an auditable record of status changes and approvals.
A warehouse management system should support visibility, but software cannot replace disciplined access controls. FlowOps by Lanta provides a centralized operational view across inventory, orders, dispatch, and shipment activity. Teams can see what changed, when it changed, and which workflow requires attention.
What changed under the non-domiciled CDL rule?
FMCSA’s final rule, “Restoring Integrity to the Issuance of Non-Domiciled CDLs,” has been in force since March 16, 2026.
The rule limits eligibility for non-domiciled commercial learner’s permits and CDLs to individuals holding specific employment-based nonimmigrant statuses:
H-2A temporary agricultural workers
H-2B temporary non-agricultural workers
E-2 treaty investors
States must verify eligibility through the Department of Homeland Security’s SAVE system. An Employment Authorization Document, by itself, is no longer sufficient proof of eligibility under the rule.
The FMCSA final-rule materials also direct states that cannot meet the new verification requirements to pause issuing non-domiciled credentials. States are expected to review existing records and revoke or downgrade credentials that do not comply.
The rule remains active while legal challenges continue. In California v. FMCSA, challengers argued the agency exceeded its authority, with oral arguments held September 11. Courts have denied stays, so carriers should not wait for litigation to conclude before reviewing their records.
What should carriers and 3PL partners do now?
Re-audit every driver qualification file connected to active transportation capacity.
Verify:
CDL or CLP status and expiration date.
Domicile classification.
Underlying immigration category.
SAVE verification documentation where applicable.
Driver certification and medical qualification records.
ELD, hours-of-service, and carrier onboarding records.
Whether a subcontractor’s credential review is documented.
Do not assume a previously accepted EAD remains sufficient. Confirm the driver’s qualifying status and retain evidence supporting the qualification decision.
The DOT and CVSA brake-inspection angle also belongs in the same compliance workflow. CVSA Brake Safety Week reminds fleets that driver qualification, vehicle condition, inspection records, and maintenance controls must work together. A digital system can organize certifications, HOS records, dispatch documentation, and maintenance-related alerts, but it does not replace a physical brake inspection or a qualified compliance review.
FlowOps by Lanta connects warehouse and transportation workflows in one platform. Its dispatch, driver, document, and reporting modules help operators maintain a clearer compliance trail instead of relying on email threads and disconnected spreadsheets.
Is LNG traffic through Hormuz actually returning?
Only cautiously.
At least two LNG tankers transited the Strait of Hormuz during the week of September 18-the first reported open commercial LNG transits since early July. Producers are also testing ship-to-ship transfers off Oman to move cargo around the most exposed portion of the route.
Those transfers remain limited. Current activity is estimated at roughly 3% of pre-war flow volumes, according to the supplied industry reporting. Reuters reported that overall shipping traffic remains well below normal levels.
Treat the movement as a test, not normalization.
Energy buyers, manufacturers, food distributors, and retailers should maintain:
Alternate routing plans.
Buffer inventory for critical inputs.
Multiple supplier and carrier options.
Scenario-based transportation budgets.
Clear customer communication triggers.
Contingency plans for port, terminal, and transshipment delays.
For companies using a 4PL model, this is where network-level coordination matters. A 4PL does more than book transportation; it connects suppliers, carriers, warehouses, inventory policies, and customer commitments into one operating plan.
That coordination becomes especially important for a Mid-Atlantic operation managing import flows through multiple gateways. A 3PL Maryland partner may need to stage products, rebalance inventory, or modify fulfillment priorities before a disruption becomes a stockout. The same discipline applies to a food-grade warehouse, a Hazmat certified 3PL, or a Glen Burnie warehouse serving time-sensitive e-commerce orders.
Where does logistics software fit?
Visibility helps decision-makers act before a disruption reaches the customer.
FlowOps by Lanta is Lanta Logistics’ proprietary, operator-built warehouse management system and transportation platform. It combines inventory, fulfillment, dispatch, routing, yard activity, documents, billing, and customer visibility.
Key points include:
$99/month flat rate.
Unlimited SKUs.
20 operational modules.
Patent-pending Agentic AI.
Real screenshots from an active operating environment.
Support for warehouse and transportation workflows in one platform.
See FlowOps by Lanta or review the FlowOps comparison page. Lanta Logistics also provides end-to-end warehousing, fulfillment, transportation, and 1PL–4PL coordination through its logistics services.
Actionable takeaway: By Monday, re-audit your non-domiciled CDL files, verify carrier and vendor access to operational systems, and document one manual fallback route for every high-value or disruption-sensitive load.
This article provides operational information, not legal advice. Consult qualified counsel and compliance professionals for specific FMCSA, cybersecurity, immigration, or transportation decisions.
Sources
Comments