Cyberattack Hits Oilfield Services Provider, NPK

January 9, 2026

INCIDENT

Oilfield site access solution provider, The Woodlands, Texas-based NPK International Inc. suffered a cyberattack in October last year and is now letting victims know the details of the attack.
NPK completed an investigation involving suspicious activity within its network that occurred on October 28, 2024.
“When NPK first learned of this activity, it immediately took steps to secure its network, notified law enforcement, and engaged third-party forensic firms with experience helping other companies in similar situations,” the company said in a notice to victims.
Through the investigation, NPK learned an unauthorized actor accessed its network between October 28, 2024, and October 29, 2024. The threat actor copied certain files from its servers. NPK conducted a thorough review of the relevant files, and on August 12, 2025, the review determined that one or more files contained the personal information of victims, including the name, Social Security number, and financial account number.

Incident Date

October 28, 2024

Estimated Cost

Unknown at this time

Type of Malware

No Malware identified

Threat Source

No threat source identified