Halliburton

halliburton.com

CONFIRMED

Oilfield services corporation Halliburton filed Form 8-K Item 1.05 disclosing an unauthorized intrusion by RansomHub that forced the company to take global systems offline.

Observable Status CONFIRMED

Industry / Sector Energy & Oil Field Services

Incident Classification Network Intrusion & Ransomware

Attributed Threat Actor RansomHub

Affected Population Scope Under Audit

First Seen 2024-08-21

Last Updated 2024-09-03

Compromised Data Classes:

Internal Business Applications Corporate Telemetry Data Operational Logistics Records Corporate Telemetry

Statutory Regulatory Filings:

U.S. Securities and Exchange Commission (SEC): Form 8-K Item 1.05 (Material Cybersecurity Incidents) (0000045012-24-000067)

OPEN WEIGHTS TELEMETRY • DETERMINISTIC CONFIDENCE

Confidence & Source Corroboration

94% CONFIDENCE

1. Primary Authority CONFIRMED BY REGULATOR Base weight: 65%

2. Evidence Specificity +19% Statutory Filing Verified

3. Corroboration Curve +7% 2 independent domains

4. Timeline & Staleness +3% 3 milestones logged

Corroborated Source Domains:

halliburton.com sec.gov

STATUTORY REGULATORY DISCLOSURES

Official Regulatory Filings & Legal Compliance Records

1 Verified Statutory Filing

Regulatory Ground Truth Standard: The disclosures below represent formal statutory filings and enforcement records submitted to government regulatory authorities (SEC, State Attorneys General, HHS OCR, CISA). In accordance with repository principles, this data is captured exactly as filed by the reporting entity and is never modified, overridden, or synthesized by AI models.

U.S. Securities and Exchange Commission (SEC)

Form 8-K Item 1.05 (Material Cybersecurity Incidents)

CONFIRMED BY REGULATOR

Docket / Accession ID 0000045012-24-000067

Statutory Filing Date 2024-08-23

Disclosed Impact Scope Under Audit

Evidence Standard Regulatory Ground Truth

Statutory Filing Details & Summary (Preserved As Filed):

Item 1.05 Material Cybersecurity Incident disclosure filed by Halliburton Company reporting unauthorized third-party access to internal enterprise IT systems and activation of incident response protocols.

View Official Regulatory Filing Document https://www.sec.gov/Archives/edgar/data/45012/000004501224000067/hal-20240823.htm

Technical Forensic Briefing

Incident Overview

Oilfield services corporation Halliburton filed Form 8-K Item 1.05 disclosing an unauthorized intrusion by RansomHub that forced the company to take global systems offline.

Compromised Assets & Data Scope

Primary Data Classes: Internal Business Applications, Corporate Telemetry Data, Operational Logistics Records.

Statutory Disclosures & Compliance

Statutory filing submitted to SEC (Form 8-K (Item 1.05)) under accession 0000045012-24-000067.

Milestone Timeline (3 events logged)

2024-08-21 16:00 UTC

CONFIRMED BY TARGET

Energy giant Halliburton detects unauthorized third-party access to corporate systems and activates incident response protocols.

Source: Halliburton Incident Advisory

2024-08-23 17:15 UTC

CONFIRMED BY REGULATOR

Halliburton files Form 8-K Item 1.05 disclosing material disruption to business operations and systems shutdown.

Source: SEC EDGAR 8-K Item 1.05 (Adsh 0000045012-24-000067)

2024-09-03 18:00 UTC

CONFIRMED BY REGULATOR

Form 8-K Item 8.01 supplemental filing confirms company is restoring operational capabilities and remediating core IT environments.

Source: SEC EDGAR 8-K Item 8.01 (Adsh 0000045012-24-000072)

Have updated information or a new verifiable source?

This incident record is a flat Markdown file tracked in Git. Propose an update or add a milestone via Pull Request.

Propose Update via GitHub