Railroad Commissioner Wayne Christian is urging Texas oil and gas producers, pipeline operators, and other energy companies to strengthen cybersecurity defenses following cyber incidents involving U.S.-bound energy tankers and federal warnings about threats to critical infrastructure.
Why is the RRC warning energy companies?
Christian called on Texas energy companies to invest in, test, and monitor cybersecurity systems as malicious cyber actors increasingly target internet-connected operational technology and industrial control systems.
Commissioner Wayne Christian: "Texas is the energy capital of the world, and that makes our energy infrastructure a prime target for foreign adversaries. We must invest, test, monitor, and strengthen our defenses now."
In August, the Coast Guard and FBI boarded two foreign-flagged energy vessels bound for the United States after indications that foreign cyber actors had compromised their networks.
One vessel, the 1,093-foot VL Prosperity, was a Liberian-flagged crude oil tanker headed for Galveston, which was able to carry roughly 2.3 million barrels of oil. Federal officials have not publicly attributed the incidents to a specific country or group.
What threats are energy companies facing?
Christian pointed to separate federal warnings involving China-linked and Iran-affiliated cyber actors targeting U.S. critical infrastructure, including internet-connected operational technology and industrial control systems.
The Railroad Commission also issued a cybersecurity notice earlier this year warning regulated operators that successful cyberattacks could cause operational disruptions and financial losses across critical infrastructure.
How should companies respond?
Christian urged operators to strengthen cyber resilience before an attack occurs and said emerging technologies, including artificial intelligence, could become part of both the threat and the defense.
Commissioner Wayne Christian: "We are entering a new era of cybersecurity, and we must prepare now. America's enemies are seeking ways to weaponize AI against our critical infrastructure. We must be equally aggressive in using AI as a tool to defend it."
