01—Abstract
Summary
Summary of the 8-K filed September 3, 2024. Cited figures are marked; the original filing is the authoritative source.
On August 21, 2024, Halliburton Company became aware that an unauthorized third party had gained access to certain of its systems.
This Form 8-K, filed September 3, 2024 under Item 1.05 (Material Cybersecurity Incident), updates the earlier disclosure. The Company activated its cybersecurity response plan, engaged external advisors, proactively took certain systems offline, and notified law enforcement. Investigation, system restoration, and assessment of impacted data are ongoing, and the Company is communicating with customers and other stakeholders.
The filing states that the incident has caused disruptions and limited access to portions of the business applications supporting operations and corporate functions. Halliburton believes the unauthorized party accessed and exfiltrated information from its systems, and it is evaluating the nature and scope of that information and what notifications are required. The Company states that it continues to provide products and services to customers globally, and that it is following its process-based safety standards under the Halliburton Management System.
Halliburton has incurred, and may continue to incur, expenses related to the response. As of the filing date, the Company believes the incident has not had, and is not reasonably likely to have, a material impact on its financial condition or results of operations. The filing identifies ongoing risks, including the adequacy of processes during the disruption, diversion of management attention, potential litigation, changes in customer behavior, and regulatory scrutiny.
02—Key points
Key Highlights
- Halliburton became aware on August 21, 2024 that an unauthorized third party gained access to certain of its systems.
- The Company activated its cybersecurity response plan, engaged external advisors, took certain systems offline, and notified law enforcement.
- The incident disrupted and limited access to portions of business applications supporting operations and corporate functions.
- The Company believes the unauthorized party accessed and exfiltrated information, and is evaluating the nature and scope of that data and notification obligations.
- Halliburton states it continues to provide products and services to customers globally.
- As of the filing date, the Company believes the incident has not had and is not reasonably likely to have a material impact on financial condition or results of operations.
- Ongoing risks include potential litigation, changes in customer behavior, and regulatory scrutiny.
03—Questions
Frequently Asked Questions
When did Halliburton become aware of the cybersecurity incident?
Halliburton states that it became aware on August 21, 2024 that an unauthorized third party had gained access to certain of its systems.
Is the incident expected to have a material financial impact?
As of the filing date, the Company believes the incident has not had, and is not reasonably likely to have, a material impact on its financial condition or results of operations, though it has incurred and may continue to incur response expenses.
Are Halliburton's operations and customer service affected?
The incident caused disruptions and limited access to portions of business applications supporting operations and corporate functions. The Company states it continues to provide products and services to customers globally and is following its process-based safety standards.
Was data taken during the incident?
The Company believes the unauthorized third party accessed and exfiltrated information from its systems and is evaluating the nature and scope of that information and what notifications are required.
What steps has Halliburton taken in response?
The Company activated its cybersecurity response plan, launched an internal investigation with external advisors, proactively took certain systems offline, notified law enforcement, and is restoring systems, assessing impacted data, and communicating with customers and stakeholders.
04—Continue