Halliburton reports data exfiltration after an August 2024 intrusion

Halliburton, the oilfield services company, told investors on August 23, 2024 that an unauthorized third party had gained access to some of its systems two days earlier. On September 3 it filed under Item 1.05, adding that information had been taken from its systems.

First report, Item 8.01

The company took some systems offline, notified law enforcement and said it was assessing materiality.

Item 1.05 filing

The September filing described disruption to business applications and confirmed exfiltration. Halliburton said it continued to serve customers globally and was working out what information was taken and which notifications were required. It concluded the incident had not had, and was not reasonably likely to have, a material effect on its financial condition.

An unusual combination

Halliburton filed under Item 1.05 while stating it did not expect a material financial effect. Its filing lists other risks it faced, including diversion of management attention and regulatory scrutiny, but it does not explain which factors led it to use Item 1.05. The type of data taken is not described.