Halliburton Takes Systems Offline following Cyberattack

September 1, 2024

INCIDENT

“On August 21, 2024, Halliburton Company became aware that an unauthorized third party gained access to certain of its systems,” the company said in an 8-K report to the SEC. “The Company’s response efforts included proactively taking certain systems offline to help protect them and notifying law enforcement. The Company’s ongoing investigation and response include restoration of its systems and assessment of materiality,” Halliburton vice president Charles Geer said in the report.

Reuters reported on Thursday that some employees were told not to connect to the company’s internal network as a precaution following the cyberattack. The company has not shared many details about the attack, causing other customers to disconnect from Halliburton due to the lack of information being shared. BleepingComputer reports some companies are working with ONG-ISAC—an agency that acts as a central point of coordination and communication for physical and cybersecurity threats against the oil and gas industry—to receive technical information about the attack to determine if they were breached as well.

Incident Date

August 21, 2024

Estimated Cost

incident cost $35M , IT systems and business operations disrupted, data stolen , incident cost $35M

Victims

Type of Malware

No Malware identified

Threat Source