Oil Giant Halliburton Hit by Ransomware Cyberattack
Halliburton, one of the world’s leading oil service companies, confirmed a cyber incident that has disrupted operations at its Houston, Texas offices. The US oil giant, which ranks as the second-largest oilfield service provider globally, has been working with external cybersecurity experts to investigate and contain the breach.
While the technical specifics of the cyberattack remain under wraps, early indications suggest it may bear the hallmarks of a ransomware assault. These attacks typically involve the encryption of sensitive data, followed by demands for a hefty ransom in exchange for the decryption key. Reuters reported that the cyber incident has impacted Halliburton's north Houston campus and several global connectivity networks.
The company also filed a report with the SEC, revealing that on August 21, 2024, an unauthorized third party gained access to specific systems. Halliburton immediately initiated its cybersecurity response plan, involving both internal resources and external advisors to address and mitigate the threat. As part of their response, the company proactively took certain systems offline and alerted law enforcement.
Halliburton, which employs approximately 55,000 people across numerous subsidiaries and affiliates in over 70 countries, is still in the process of restoring affected systems and evaluating the broader impact of the breach.
The oil and gas industry has increasingly become a target for ransomware groups, who often resort to leak sites to pressure victims into paying. In a notable case from 2021, Colonial Pipeline paid $4.4 million to obtain a decryption key after a ransomware attack caused significant gasoline shortages across parts of the United States.
As Halliburton continues its investigation, the incident underscores the growing cybersecurity threats facing critical infrastructure companies worldwide.
