Dive Brief:
- Energy sector vendor ENGlobal is dealing with the effects of a cyberattack on its IT systems and restoration efforts remain underway, the company said in a Monday securities filing.
- “The preliminary investigation has revealed that a threat actor illegally accessed the company’s IT system and encrypted some of its data files,” ENGlobal CFO Darren Spriggs said in the filing. The Houston-based company, which provides engineering and automation services to the energy sector and U.S. government agencies, said it became aware of the intrusion on Nov. 25.
- ENGlobal restricted access to its IT system in an effort to contain and remediate the attack. “While the investigation and remediation efforts remain ongoing, access to the company’s IT system is limited to essential business operations,” Spriggs said in the filing.
Dive Insight:
The attack targeting ENGlobal marks at least the third disruptive cybersecurity incident impacting energy sector providers since August. Halliburton disclosed a cyberattack in a securities filing in August and Newpark Resources said it was hit by a ransomware attack in October.
Halliburton, Newpark Resources and ENGlobal are all based in Texas. Halliburton, one of the world’s largest providers of oil services, reported $35 million in charges directly due to the attack.
ENGlobal said the timing of restoration and full access to the company’s IT system remains unknown. The company did not immediately respond to a request for comment.
“The company has not yet determined whether the cybersecurity incident is reasonably likely to materially impact the company’s financial condition or results of operations,” Spriggs said in the securities filing.
