FEDERALItem 1.05 · mandatoryHackingEnergy & UtilitiesUtilitiesOil & Gas ServicesData ExfiltratedCustomer Data InvolvedLowActive

HALLIBURTON COMPANY

bd_246fd41eb8f31aa3 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 21, 2024

Filed

Sep 3, 2024

To disclose

13 days

Affected

Not disclosed

Confidence

88%

Full breach record for HALLIBURTON COMPANY →2 incidents on file

On August 21, 2024, Halliburton Company became aware that an unauthorized third party gained access to certain of its systems. The Company activated its cybersecurity response plan, took certain systems offline, notified law enforcement, and engaged external advisors. The incident caused disruptions to business applications supporting operations and corporate functions. The Company believes the unauthorized third party accessed and exfiltrated information. As of the filing, the Company does not believe the incident is reasonably likely to have a material financial impact.

J jump to incidentP pin to compareR raw source

SEC clockMateriality determined Aug 30, 2024 → Filed Sep 3, 20244d ✓ SEC 4-day OK13 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 13 days

Aug 21, 2024

Discovered

Aug 30, 2024

Scope determined

Sep 3, 2024

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: HALLIBURTON COMPANY
norm: halliburton
SEC CIK: 0000045012
Domain: halliburton.com

Name: HALLIBURTON COMPANY
norm: halliburton
SEC CIK: 0000045012
Domain: halliburton.com
Industry: Oilfield services
Industry: Energy & Utilitiesllm
NAICS 213112 · Support Activities for Oil and Gas Operations

Discovered: Aug 21, 2024
Materiality determined: Aug 30, 2024
Notification sent: —
Affected individuals: Not disclosed
Data types: —
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified law enforcement

During the incident: Activated its cybersecurity response plan
Launched an investigation internally with the support of external advisors to assess and remediate the unauthorized activity
Proactively taking certain systems offline to help protect them
Notifying law enforcement
Communicating with its customers and other stakeholders regarding the incident
Restoration of its systems and assessment of impacted data
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 days(13 days from discovery to filing)
Compliance flags: SEC 4-day OK · 4d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
SEC
Materiality determined: Aug 30, 2024
→ Filed: Sep 3, 2024
4d cal. 4 business days SEC 4-day OK

Statute	Window	Elapsed	Threshold	Status
SEC	Materiality determined: Aug 30, 2024 → Filed: Sep 3, 2024	4d cal.	4 business days	SEC 4-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/45012/000004501224000052/hal-20240830.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Sep 3, 2024
Raw hash: 2d2c834a24d55492965d3a15fc9e25529ab7a8df05d7c0b41af1ff15c4861a6e

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html29.3 KB

Download View at source

Reporting entityHALLIBURTON COMPANY

Victim entityHALLIBURTON COMPANY

Incidentdiscovered Aug 21, 2024

Stated responseActivated its cybersecurity response plan

ComplianceSEC 4-day OK

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing