Halliburton confirms data was stolen in ongoing cyberattack

Core Viewpoint - Halliburton has confirmed a cyberattack that resulted in unauthorized access and exfiltration of information, and the company is currently assessing the impact and nature of the stolen data [1][2]. Group 1: Cyberattack Details - Halliburton took some of its systems offline after detecting the cyberattack and is working to identify the effects on its oil and fracking operations [1][2]. - The company is conducting an ongoing investigation and response, which includes system restoration and assessment of impacted data [2]. - A ransom note linked to the incident claims that a ransomware gang named RansomHub is responsible for the attack, although Halliburton has not confirmed this connection [3]. Group 2: Company Background and Financials - Halliburton is one of the world's largest energy companies, employing close to 48,000 people across various countries [2]. - The company reported $23 billion in revenue for 2023, and its CEO received $19 million in total executive compensation during the same year [4]. Group 3: Ransomware Context - RansomHub has claimed over 210 victims since its inception in February 2024 and is also linked to a cyberattack on Change Healthcare [3]. - The gang has not yet listed Halliburton as a victim on its dark web leak site, which is typically used to extort victims by publishing stolen files [3].