A person familiar with the matter told Reuters that Halliburton was hit by a cyberattack that appears to be impacting business operations at the company’s Houston campus and some global networks.
Halliburton would neither confirm nor deny to CNN that it is the victim of a cyberattack, but the oilfield services firm did acknowledge an unspecified “issue.”
“We are aware of an issue affecting certain company systems and are working diligently to assess the cause and potential impact,” a Halliburton spokesperson said in a statement. “We have activated our pre-planned response plan and are working internally and with leading experts to remediate the issue.”
Halliburton declined to describe the nature of the incident.
On Thursday, the Energy Department told CNN that it has seen no evidence of a disruption to energy services.
CNN asked Energy Department spokesperson Charisma Troiano about the reported Halliburton attack. Troiano said in a statement that the agency is “aware of reports of a cyber incident impacting an energy services company.”
“However, the exact nature of the incident is unknown at this time,” Troiano said, without naming Halliburton directly.
“There are no indications that the incident is impacting energy services at this time and DOE is coordinating with interagency partners,” the Energy Department spokesperson said.
Representatives for the Cybersecurity and Infrastructure Security Agency and the American Petroleum Institute did not provide a comment.
Cyberattacks have increasingly disrupted operations at businesses.
A ransomware attack on software provider CDK Global earlier this year caused trouble at thousands of auto dealers across the United States. Sources previously told CNN that CDK appears to have paid hackers a $25 million ransom to resolve the massive disruption.
During the spring of 2021, a ransomware attack paralyzed the Colonial Pipeline, causing panic buying that wiped out supplies at gas stations along the East Coast.
Eric Noonan, CEO of security and IT provider CyberSheath said the apparent cyberattack on Halliburton is another reminder of the vulnerability of companies that operate critical infrastructure like energy.
“Critical infrastructure operators in the United States get to decide how well they do or do not employ cybersecurity controls,” Noonan said. “This situation cannot continue perpetually without enormous costs to the American people.”
