HomeCrew Claims Hackers Seized LNG Carrier Safety Systems, Forcing Vivit Africa Diversion

Crew Claims Hackers Seized LNG Carrier Safety Systems, Forcing Vivit Africa Diversion

September 21, 2026

🔔 Subscribe to ShipUniverse Weekly →

The crew of the 174,000-cbm Vivit Africa LNG says hackers temporarily interfered with critical cargo and safety controls during a voyage carrying U.S. LNG from Cameron, Louisiana, to Italy, but investigators have not confirmed that a cyberattack occurred. Crew members told Splash that attackers gained temporary control of steam-pressure and safety-valve systems while the ship crossed the Strait of Gibraltar, then compromised tank-pressure controls, pressure-relief valves and the boil-off gas management cycle as the vessel approached the Adriatic. What authorities have independently confirmed is narrower: the ship suffered a malfunction affecting systems used to monitor cargo parameters, company technicians were required, Italy's Chioggia Coast Guard warned surrounding traffic to keep clear, and the vessel abandoned its planned discharge near Rovigo before turning west toward Spain with its LNG cargo still aboard. Korean Register is investigating, while equipment supplier Kongsberg Maritime says it is too early to determine the cause or security implications

LNG Cyber Incident · Vivit Africa LNG

Confirmed Failure vs. Crew Cyber Claims

The ship unquestionably suffered a cargo-control problem serious enough to stop its Italian discharge. Whether hackers actually manipulated safety systems remains under investigation.

CONFIRMED Authority / company-level facts
01
Cargo Monitoring Malfunction
The master reported problems affecting systems used to monitor cargo parameters.
02
Technicians Required
Company technical personnel had to intervene after the onboard failure.
03
Italian Discharge Abandoned
Vivit Africa LNG did not discharge at its planned Adriatic destination near Rovigo.
04
Safety Perimeter Issued
Chioggia Coast Guard issued a navigational warning directing nearby vessels to keep clear.
CREW CLAIM Not independently verified
01
Steam Pressure Controls
Crew members allege attackers temporarily gained control while the ship crossed Gibraltar.
02
Safety / Relief Valves
The crew says safety-valve and later pressure-relief functions were compromised.
03
Tank Pressure Control
Crew claims interference later extended to LNG tank-pressure management.
04
Boil-Off Gas Cycle
Crew says the boil-off gas management cycle was disrupted as the vessel approached Italy.
IMO 9950105
Capacity ~174,000 cbm
Built 2023
Owner / Manager H-Line
Charterer Vitol
Cargo Delivery Not Completed
U.S. LNG cargo was not discharged at the intended Italian terminal.
Investigation Ongoing
Korean Register was notified and the reported cyber cause remains unresolved.
Attribution None Confirmed
No attacker or threat actor has been publicly identified.
Critical distinction: the Italian Coast Guard has confirmed a cargo-monitoring malfunction, not hostile control of LNG safety equipment. The more severe valve, tank-pressure and boil-off-gas allegations come from crew members and remain unverified.
Evidence · Attribution · Operational Effect

What Is Known, Claimed and Still Unresolved

The operational disruption is established. The cyber attribution and alleged manipulation of safety-critical LNG systems are not.

Scroll sideways for the complete evidence board ← →
Issue Status Evidence Available Source Position Operational Consequence Still Needed
Cargo-Monitoring Failure CONFIRMED System Malfunction The master reported malfunctioning systems used to monitor cargo parameters. Confirmed through the Italian Coast Guard account. Company technicians were required and the ship did not complete its planned LNG discharge. Technical failure logs, system alarms and forensic analysis identifying the initiating cause.
Steam Pressure / Safety Valves CREW CLAIM Temporary Control Alleged Crew members told Splash that attackers temporarily controlled these functions near Gibraltar. Not independently verified by class, flag state, equipment supplier or Coast Guard. If verified, this would elevate the incident from monitoring-system loss to safety-critical OT manipulation. Controller logs, commands, network telemetry and confirmation that the equipment responded to unauthorized instructions.
Tank Pressure / Relief Valves CREW CLAIM Adriatic Stage Crew alleges later interference with tank-pressure controls and pressure-relief functions. Splash explicitly says the allegations have not been independently verified. LNG cargo containment depends on controlled pressure and boil-off handling, making this allegation materially more serious than a display failure. Safety-system state histories, alarm records and independent verification of valve actuation.
Boil-Off Gas Management CREW CLAIM Cycle Disruption Alleged Crew says the normal boil-off gas management cycle was interrupted. No public independent confirmation reviewed. Extended loss could interfere with normal cargo-pressure management and machinery operating strategy. Machinery logs, compressor status, pressure trends and confirmation of available fallback modes.
Italy Cargo Delivery ABORTED Rovigo Call Dropped Vessel remained offshore without unloading and subsequently headed west. Supported by Coast Guard accounts and vessel-tracking reports. The LNG cargo remained aboard and the original delivery schedule was interrupted. Final discharge destination and commercial handling of the delayed cargo.
Attack Attribution UNKNOWN No Actor Identified Crew suspects hostile cyber activity, but no public evidence identifies the attacker. Korean Register investigation is ongoing. Kongsberg says conclusions are premature. Attribution uncertainty complicates fleet-wide threat assessment and determining whether similar ships face the same exposure. Digital forensics, attack-path reconstruction and indicators linked to a known threat actor or campaign.
Voyage Disruption Sequence
August 20 Leaves Louisiana
LNG cargo departs Cameron-area loading facilities for Europe.
Mediterranean Control Access Lost
Crew reports inability to access portions of internal control systems.
Approaching Italy Voyage Stalls
Cargo-monitoring malfunction requires technical intervention.
Off Rovigo No Discharge
Vessel remains offshore and planned LNG delivery is not completed.
September 16 Turns West
Carrier abandons the Adriatic call and heads back toward the western Mediterranean.
Ship Universe OT Incident Tool

LNG Cyber / Control-System Escalation Screener

Screen the operational severity of a suspected cyber or control-system incident by selecting which safety and cargo-management functions have actually been affected.

Observed System Effects
Select only conditions that have been confirmed or reasonably established. Crew allegations can be tested separately as scenarios.
Ship Universe Screening Score 35 / 100 Elevated
Control-system availability is materially degraded, but the highest-risk safety-control effects have not been selected.
Confirm independent safeguards Verify shutdown, gas detection, pressure protection and local fallback status independently of the affected interface.
Preserve evidence Retain relevant logs, alarms, configuration history and system state before restoration work alters evidence.
Separate failure from attribution Establish which functions failed before concluding whether the initiating cause was cyber, technical or human.
01 Identify
02 Protect
03 Detect
04 Respond
05 Recover
Screening tool only: this score is a Ship Universe scenario model, not an IMO, IACS, class or flag-state severity rating. It is intended to structure incident discussion around affected functions and remaining safety layers. Actual LNG carrier operating decisions require the vessel's approved procedures, class/flag guidance, equipment documentation and qualified technical personnel.
Feedback Welcome

We welcome your feedback, suggestions, corrections, and ideas for enhancements.

Please click here to get in touch
By the ShipUniverse Editorial Team — About Us | Contact