Halliburton, a leading global oilfield service company, has confirmed experiencing a significant network disruption following a suspected cyberattack. The company, which plays a crucial role in the energy sector, acknowledged the issue but has not provided specific details regarding the nature or extent of the impact.
The cyberattack was first reported by Reuters, indicating that the incident occurred on Wednesday, primarily affecting operations at Halliburton’s headquarters in Houston. It remains unclear whether the company’s other locations worldwide have also been impacted.
Despite the reported attack, Halliburton’s shares remained stable on the New York Stock Exchange as of Thursday morning. The company, which employs nearly 48,000 people globally and generated over $23 billion in revenue last year, has historically provided services such as identifying and managing oil and gas resources. Halliburton had also been a key partner to Russian energy giants Gazprom, Rosneft, and Lukoil until it divested from these operations in September 2022 following the invasion of Ukraine.
The specifics of the cyberattack remain uncertain. Reuters, citing an insider, reported that some Halliburton employees were instructed to refrain from connecting to the company’s internal networks. This precaution suggests a potentially significant threat to the corporation’s digital infrastructure.
In a statement to Recorded Future News, a Halliburton spokesperson said, “We are aware of an issue affecting certain company systems and are working diligently to assess the cause and potential impact. We have activated our preplanned response plan and are working internally, and with leading external experts, to remediate the issue.”
Under U.S. law, public companies are required to disclose material cybersecurity incidents to the Securities and Exchange Commission (SEC) within four business days of discovering them. As of now, Halliburton has not yet filed an 8-K report regarding the incident.
The petroleum industry, recognized as one of the most critical sectors globally, has frequently been targeted by cyberattacks. These attacks range from financially motivated ransomware incidents, like those that struck Shell and Colonial Pipeline, to state-sponsored attacks, such as the Triton malware incident in Saudi Arabia. However, unlike the Colonial Pipeline ransomware attack in May 2021, which led to widespread fuel shortages and panic buying across the southeastern United States, the disruption at Halliburton is unlikely to affect gas supplies.
The identity of the perpetrator remains unknown, but the nature of the attack, once disclosed, may provide clues. Last year, the FBI warned the energy sector of an increased risk of cyberattacks from Chinese and Russian actors, targeting both criminal and state-sponsored activities. Halliburton’s ongoing investigation will likely focus on identifying the source and mitigating any further risks.
