A Canadian oil & gas company fell victim to a hacktivist-driven cyber intrusion where attackers manipulated an Automated Tank Gauge (ATG), triggering false alarms and disrupting operational integrity. The incident, though not catastrophic, exposed critical vulnerabilities in the firm’s Industrial Control Systems (ICS), specifically internet-exposed components like PLCs or SCADA systems. The attack was opportunistic, aimed at undermining public trust, damaging the company’s reputation, and creating media stir rather than inflicting physical harm or financial theft. Authorities emphasized that while no immediate safety risks materialized, the breach highlighted the potential for dangerous conditions if such manipulations went undetected—such as incorrect pressure readings leading to equipment failure or environmental hazards. The firm’s failure to secure ICS devices with VPNs, two-factor authentication, or intrusion prevention systems (IPS) exacerbated the risk. The incident aligns with a broader pattern of hacktivist targeting of critical infrastructure, where even non-sophisticated actors can exploit weak cybersecurity to disrupt industrial processes and erode confidence in national authorities.