Newpark Resources, a Texas based supplier of drilling fluids systems and composite matting to the oil and gas industry, disclosed a ransomware attack in a filing with the United States Securities and Exchange Commission on 7 November 2024.
The company said it identified the incident on 29 October 2024, when an unauthorised third party gained access to certain internal information systems. It activated its cybersecurity response plan and worked with internal staff and external advisers to investigate and contain the intrusion.
The attack disrupted and limited access to some systems and business applications, including financial and operating reporting platforms used by corporate functions. Newpark said its manufacturing and field operations continued in all material respects by reverting to established downtime procedures, so work for customers was not halted.
No ransomware group publicly claimed responsibility, the company did not disclose a ransom demand, and it did not say whether personal or customer data had been taken. Newpark told investors it did not believe the incident was reasonably likely to have a material effect on its financial condition or results of operations, while noting that it was still assessing the full scope of the attack.