MIOC INTELLIGENCE

Sanctions Evasion: The Shanghai Legendary Three-Ship Network

What’s inside?

    MIOC Logo

    This analysis was produced by Windward’s Maritime Intelligence Operations Center (MIOC) — a mission-critical operations center powered by Windward’s maritime intelligence experts, operating as a seamless extension of your team. This is a sample of what we deliver. For intelligence tailored to your operational theater, visit the MIOC page.


    The February 2026 boarding of BERTHA exposed a three-ship sanctions-evasion platform operated by the sanctioned Chinese company Shanghai Legendary Ship Management.

    Analysis of the company’s three-ship fleet indicates a deliberate architecture built on registry arbitrage and repeated AIS and identity manipulation. Recent behavior of BERTHA’s sister vessels, mirroring BERTHA’s Venezuelan loading sequence and subsequent dark sailing, suggests coordinated evasion rather than isolated activity. With one vessel interdicted, the remaining two now operate under heightened enforcement risk.

    What Happened

    On 24 February 2026, U.S. naval forces boarded and took control of the VLCC BERTHA in the Indian Ocean after tracking it from Venezuelan waters carrying sanctioned crude.

    BERTHA is operated by Shanghai Legendary Ship Management, designated by OFAC in December 2024 for facilitating Iranian petroleum exports. Its sister vessels, MIN HANG and PRIYA (formerly VESNA), remain sanctioned and AIS-dark.

    Shanghai Legendary Management's Visual Link Analysis (VLA). Source: Windward Maritime AI™.
    Shanghai Legendary Management’s Visual Link Analysis (VLA). Source: Windward Maritime AI™.

    The three vessels share defining characteristics:

    • Aging crude tankers operating in high-risk corridors.
    • Each ship is owned by a separate company, structured as a single-purpose vehicle (SPV), which is registered in Hong Kong or on the mainland.
    • Reflagging into permissive registries prior to designation.
    • Identity manipulation, including name, MMSI, and call-sign changes.

    Multi-Source Intelligence detected a tanker matching PRIYA’s physical profile northeast of Venezuela’s Jose Terminal on 18 January 2026, one day before Boscan crude loading, despite the vessel being non-transmitting. The pattern closely mirrors BERTHA’s pre-interdiction sequence: Venezuelan loading, dark sailing, and presumed trans-oceanic routing.

    The boarding of BERTHA may represent the first kinetic action against a deliberately structured three-ship sanctions-evasion platform.

    A non-transmitting vessel matching PRIYA’s profile on January 18, 2026, near Jose Terminal. Source: Windward Maritime AI™ Platform.
    A non-transmitting vessel matching PRIYA’s profile on January 18, 2026, near Jose Terminal. Source: Windward Maritime AI™ Platform.

    What It Signals

    • Sanctions evasion has industrialized: The shared management, synchronized reflagging, SPV shielding, and behavioral alignment indicate a purpose-built, multi-hull logistics architecture designed to facilitate sanctioned crude flows rather than opportunistic trading.
    • AIS darkness no longer guarantees sanctuary: Detection of PRIYA through fused behavioral and imagery analysis underscores a shrinking concealment window for dark vessels operating near known loading hubs.
    • Escalating enforcement posture: The shift from designation to physical boarding signals a potential shift in enforcement doctrine, from listing vessels to disrupting integrated evasion clusters. MIN HANG and PRIYA now carry an elevated interdiction risk given their mirrored structure and ownership.

    What to Monitor

    Monitoring should focus first on fleet behavior, particularly any reappearance of MIN HANG or PRIYA following extended AIS silence, as well as potential ship-to-ship (STS) operations in Atlantic or West African hubs. Additional name, MMSI, or flag changes would further indicate continued identity management and evasive intent.

    Corporate maneuvering is equally important. Dissolution or transfer of existing single-ship entities, creation of successor companies in alternative jurisdictions, or the substitution of technical or commercial managers may signal efforts to dilute or restructure sanctions exposure following the BERTHA interdiction.

    Cargo and routing patterns should be closely tracked, including continued Boscan crude liftings from Jose Terminal, dark departures immediately following Venezuelan calls, and Cape routing toward Asian discharge markets.

    Finally, enforcement expansion remains a key variable. Additional OFAC designations targeting insurers, brokers, or technical managers, as well as replication of boarding operations against structurally similar shadow fleets, would indicate a broader shift from vessel designation to coordinated network disruption.


    Mission-Ready Intelligence, at Your Service

    Detecting patterns like these requires more than static monitoring. Windward’s MIOC integrates multi-sensor intelligence with Agentic AI to detect, collect, and analyze threats in real time.

    To discuss ongoing intelligence coverage or ad-hoc forensic deep dives tailored to your operational theater, get in touch below.