Novo Nordisk Discloses Breach Exposing Clinical Trial and Healthcare Professional Data
Summary
Novo Nordisk said attackers accessed internal IT systems and copied clinical-trial data and healthcare professionals’ personal details. Patient data was pseudonymized; affected systems were taken offline, while core operations continued.
Key points
- Novo Nordisk confirmed unauthorized access to internal IT systems and said non-public data was copied externally.
- Exposed clinical-trial information included patient IDs, trial participation, health data, biomarkers, and lifestyle factors; the company said it was pseudonymized and not directly linked to patients’ names.
- An undisclosed number of healthcare professionals had names, contact details, registration numbers, and office locations exposed.
- The company warned affected healthcare professionals about possible phishing attempts using the exposed information.
- Novo Nordisk took affected systems offline and is investigating with external cybersecurity experts; core business operations were not impacted.
- The company has not disclosed when the breach was detected or how many people were affected.
Article Details
- Victim Organization
- Novo Nordisk
- Victim Domain
- Unknown
- Incident Type
- Unauthorized access to internal IT systems and external copying of non-public data
- Data Types Exposed
- Pseudonymized clinical trial data, including patient IDs, trial participation, sex, year of birth, biomarkers, health and immunogenicity data, and lifestyle factors
- Healthcare professionals’ names, registration numbers, email addresses, phone numbers, WhatsApp details, and office locations
- Affected Records
- Not disclosed
- Affected Data Size
- Unknown
- Operational Impact
- Compromised internal IT systems were taken offline. Novo Nordisk said core business operations were not impacted and remained operational.
- Ransom Or Extortion
- Unknown
- Claim Status
- confirmed