Incident disclosureDisclosed 2024-09-03Halliburton CoSEC filing

Halliburton Co discloses a cybersecurity incident with data taken without authorization (SEC 8-K, September 2024)

As previously disclosed in a Current Report on Form 8-K, on August 21, 2024, Halliburton Company (the “Company”) became aware that an unauthorized third party gained access to certain of its systems.

What happened

  • When it learned of the issue, the Company activated its cybersecurity response plan and launched an investigation internally with the support of external advisors to assess and remediate the unauthorized activity.Form 8-K Item 1.05, Halliburton Co, filed 2024-09-03
  • The Company’s response efforts included proactively taking certain systems offline to help protect them and notifying law enforcement.Form 8-K Item 1.05, Halliburton Co, filed 2024-09-03
  • The Company’s ongoing investigation and response include restoration of its systems and assessment of impacted data.Form 8-K Item 1.05, Halliburton Co, filed 2024-09-03

The failure pattern

Insufficient segmentation lets a foothold spreadOne compromised account, vendor or network segment reaches management planes, backups and everything else.How to prevent it Audit trail missing actor, target or decisionAfter something goes wrong nobody can tell who or what took the action, on which object, or why.How to prevent it
Watch the pattern: Insufficient segmentation lets a foothold spread

Related standards

CollectSEA's mapping through this incident's failure pattern; not an official determination by the standards bodies.

Building something similar?

Describe your design and see every precedent that applies, with safeguards you can hand to your coding agent.

Analyze your design

Incidents with the same pattern