AI Governance
Data Centers
Drones
Climate
Privacy
2026 Maine Senate
Bob Dylan
Last Update: 10/27/2026 at 6:00 AM EST
Novo Nordisk Data Breach
Coverage from National Law Review, Tech Insider, and others
Novo Nordisk disclosed unauthorized access to internal IT systems in which non-public data from some clinical trials was copied externally.
Reported patient-related information included pseudonymized trial IDs, participation details, demographic and health attributes, biomarkers, immunogenicity data, and lifestyle factors; information about some healthcare professionals was also potentially exposed. Although the company said patient names and other direct identifiers were not included, experts warned that combining health attributes with outside data could create reidentification, phishing, and impersonation risks. Novo Nordisk took some systems offline, notified authorities and affected groups, and began an investigation with external cybersecurity specialists.
Looking Back
85 Day Timeline
Jun 11
Jun 25
Jul 9
Jul 23
Aug 6
Aug 20
Sep 3
All Articles29 articles
Important
Novo Nordisk faces a proposed nationwide class action after a recent cyberattack allegedly exfiltrated 1.3 terabytes of data from company systems, creating potentially years of litigation and insurance costs.
9/3/2026 • Cybersecurity (Privacy-Relevant) • General
Novo Nordisk confirmed an IT breach involving pseudonymized clinical-trial and healthcare professional data, raising GDPR concerns in the EU.
7/4/2026 • Data Breaches & Exposure Events • General
Novo Nordisk confirmed unauthorized access to internal systems involving non-public clinical trial data and some personal data, while FulcrumSec extortion claims remained unverified in 2020s reporting.
6/18/2026 • Cybersecurity (Privacy-Relevant) • General
FulcrumSec threatened to sell allegedly stolen Novo Nordisk data after a $25 million ransom demand following a June 11 disclosed cybersecurity incident.
6/16/2026 • Data Breaches & Exposure Events • General
FulcrumSec claimed responsibility for a Novo Nordisk breach in Denmark, alleging 1.3TB exfiltration and extortion, as Novo Nordisk disclosed unauthorized access to non-public personal data.
6/16/2026 • Data Breaches & Exposure Events • General
Novo Nordisk disclosed a clinical trials data breach in Denmark after a threat actor accessed limited internal IT systems containing deidentified patient data, triggering patient and healthcare provider notifications.
6/15/2026 • Data Breaches & Exposure Events • General
Novo Nordisk disclosed a breach in Denmark affecting clinical trial data and healthcare professional contact details, with GDPR notification obligations under EU rules.
6/15/2026 • Data Breaches & Exposure Events • General
Novo Nordisk disclosed a data breach after unauthorized access to internal IT systems exposed pseudonymized clinical trial and healthcare professional information.
6/12/2026 • Data Breaches & Exposure Events • General
FulcrumSec claims June 1 online publication of data allegedly stolen from Novo Nordisk after asserted access beginning in March.
6/17/2026 • Cybersecurity Tech (Privacy-Relevant) • General
Novo Nordisk disclosed a clinical-trial data breach involving patient pseudonymized information and healthcare professional contact details after unauthorized copying from internal IT systems.
6/12/2026 • Data Breaches & Exposure Events • General
Interesting
Novo Nordisk reported a security incident on Thursday involving unauthorized external copying of clinical trial patient information from internal IT systems.
6/11/2026 • Data Breaches & Exposure Events • General
Novo Nordisk reported an unauthorized external copy of some clinical trial patient information June 11 and began a probe with external cybersecurity experts in Bengaluru, India.
6/11/2026 • Data Breaches & Exposure Events • General
Novo Nordisk disclosed an unauthorized external copy of clinical trial patient data on Thursday, launched an investigation, and coordinated with relevant authorities.
6/11/2026 • Data Breaches & Exposure Events • General
Novo Nordisk reported on June 11 that unauthorized external copying of clinical-trial patient data occurred from internal IT systems and launched an investigation.
6/11/2026 • Data Breaches & Exposure Events • General
Novo Nordisk identified and investigated a June 11 security incident involving unauthorized copying of limited clinical-trial patient data from internal IT systems and coordinated with relevant authorities.
6/11/2026 • Data Breaches & Exposure Events • General
Novo Nordisk reported unauthorized access to internal systems on June 11, 2026, exposing pseudonymized clinical trial data and identifiable healthcare professional contact details.
6/12/2026 • Data Breaches & Exposure Events • General
Novo Nordisk reported unauthorized access to clinical trial data for Ozempic and Wegovy in Denmark, with investigation underway and authorities notified.
6/16/2026 • Data Breaches & Exposure Events • General
Novo Nordisk, in Denmark, faced extortion claims after a security incident as FulcrumSec and TheUSERS007 demanded ransom amounts.
6/17/2026 • Data Breaches & Exposure Events • General
Novo Nordisk disclosed a clinical trial patient data breach and is assessing exposure scope while continuing to face GLP-1 production constraints for Wegovy.
6/17/2026 • Data Breaches & Exposure Events • General
Novo Nordisk disclosed a clinical-trial patient data breach and is assessing scope and regulatory implications amid GLP-1 production constraints.
6/17/2026 • Data Breaches & Exposure Events • General
FulcrumSec claimed responsibility for a Novo Nordisk breach disclosed in Denmark late last week, citing GitHub token access and large-scale exfiltration of clinical-trials-related data.
6/17/2026 • Data Breaches & Exposure Events • General
FulcrumSec threatened to sell terabytes of alleged stolen Novo Nordisk data after a $25 million ransom demand was refused, following a June 11 cybersecurity disclosure in Denmark.
6/16/2026 • Data Breaches & Exposure Events • General
Novo Nordisk disclosed a cybersecurity incident involving unauthorized access and personal data theft affecting clinical trial patients and healthcare providers, with patient data described as pseudonymized.
6/15/2026 • Data Breaches & Exposure Events • General
Novo Nordisk disclosed an unauthorized access incident in which external copying exposed pseudonymized clinical trial and healthcare provider data.
6/13/2026 • Cybersecurity (Privacy-Relevant) • General
Novo Nordisk disclosed an IT security incident in Denmark that involved unauthorized access and external copying of pseudonymized clinical trial and healthcare provider data.
6/12/2026 • Data Breaches & Exposure Events • General
Novo Nordisk reported an externally copied clinical-trial data security incident in which patient demographics and health data may have been affected, while authorities were contacted.
6/11/2026 • Cybersecurity Tech (Privacy-Relevant) • General
Novo Nordisk said a security incident in internal IT systems involved unauthorized external copying of some clinical-trial patient data, and the company involved cybersecurity experts and authorities.
6/11/2026 • Data Breaches & Exposure Events • General
Novo Nordisk reported a data breach involving unauthorized external copying of de-identified trial patient data and issued vigilance guidance during IT restoration.
6/11/2026 • Cybersecurity (Privacy-Relevant) • General
Novo Nordisk disclosed a security incident in Denmark in which unauthorized access led to external copying of non-public personal data.
6/11/2026 • Data Breaches & Exposure Events • General