U.S. Government Warns of Widespread Attacks on Exposed Fuel and Chemical Tank Monitoring Systems Over 900 automatic tank gauge (ATG) systems critical devices used to monitor fuel and chemical storage tanks in the U.S. have been found exposed online and are under active attack. ATGs automate inventory control, leak detection, and regulatory compliance across gas stations, industrial facilities, and other critical infrastructure sectors. On Tuesday, the Cybersecurity and Infrastructure Security Agency (CISA), FBI, NSA, Department of Energy, and other federal agencies issued a joint advisory urging organizations to secure these internet-facing systems. Threat actors are exploiting vulnerabilities including hardcoded credentials, authentication bypasses, SQL injection, and command execution flaws to alter system settings, disable alerts, and risk leaks or equipment damage. While the U.S. government has not attributed the attacks to a specific group, the advisory follows a May report by CNN linking Iranian hackers to breaches of ATG systems at multiple U.S. gas stations. In those incidents, attackers manipulated display readings without altering actual fuel levels, raising concerns about potential disruptions to safety functions like leak detection. Security firm Shadowserver reported over 1,000 exposed ATG systems globally, with 909 located in the U.S. as of June 5. The agencies recommend restricting remote access, replacing default passwords, applying security updates, and implementing multi-factor authentication to mitigate risks. The warning comes amid broader concerns over industrial control system (ICS) security, including a separate April advisory linking Iranian state-backed hackers to attacks on Rockwell Automation PLCs since March 2026, which caused financial and operational disruptions. Censys data revealed that 74.6% of exposed ICS hosts globally are in the U.S.