The Sensors

The Iranian-linked hackers did not crash anything.

They did not shut down a pipeline or cut power to a city or trigger an alarm that would have given someone a reason to respond. They entered the systems controlling fuel tank sensors at gas stations across several states, and then they left. The sensors remained fully operational. The gas remained in the tanks. The stations remained open.

A fuel tank sensor, for context, monitors the amount of fuel in an underground storage tank. It reports the level. When the level drops below a threshold, it tells someone to order more fuel. This is, in full, what a fuel tank sensor does. (I am not making this up. The sensor's entire purpose is to measure a number and then report the number to whoever is in charge of ordering more fuel.)

The hackers accessed the sensors. They looked at the numbers.

According to the military analysis, this was a probe. The hackers were testing what was exposed, what was unprotected, and what could be reached later — during, say, a larger conflict where knowing the precise fuel levels at specific locations across several states might matter for reasons that have not been fully described to the public yet.

Officials confirmed that shutting anything down was not, apparently, the point.

The point was presence.

Being there. Being known to be there. The information value of several thousand gallons of regular unleaded at a specific location in a specific state is, by itself, not obvious. The information that you can access that number whenever you need it — that the sensors are reachable, that no one noticed until afterward — has a different value. The hackers were not stealing fuel. They were making a note about where the fuel was, in case that became useful.

"You may own the watches," someone said. "But we own all the time."

This is the kind of thing that gets said when someone has just accessed your fuel tank sensors.

The sensors continue to report. Levels update automatically. The stations remain open. The hackers have what they came for, and what they came for was a number that changes every time someone fills a tank.

The specific difficulty with a probe is that it is not the attack you prepared for. The pipeline shutdown is the attack you have a response protocol for. The gas station sensor probe is the thing you will prepare for after you finish determining whether you needed to prepare for it, which will take some time, because the sensors are still reporting normal.

They are still reporting normal.