cyber.hendryadrian.com
Cyber Attack & Data Breach · bleepingcomputer.com

Novocure Breach Exposes Records of More Than 1,400 Cancer Patients

· Original article ↗

Summary

Novocure says a mid-August intrusion exposed records for more than 1,400 U.S. cancer patients and contact details for an undisclosed number of employees. Fewer than 50 patients had identifying information exposed; treatment devices and operations were unaffected.

Key points

  • Novocure detected unauthorized access to some information systems in mid-August.
  • More than 1,400 U.S. patient records containing ID numbers were accessed; most lacked names or other direct identifiers.
  • Identifying information and healthcare-provider contact details were accessed for fewer than 50 patients in the western U.S.
  • Contact information, including job titles and phone numbers, was exposed for an undisclosed number of employees.
  • Novocure said its medical treatment devices were not accessed, operations were not compromised, and systems remain functional.
  • The company is assessing notification requirements. The method of access and whether a ransom was sought were not established in the article.

Article Details

Victim Organization
Novocure
Incident Type
Cyberattack involving unauthorized access to information systems and exposure of patient and employee data
Data Types Exposed
  • Patient ID numbers
  • Identifying information for fewer than 50 patients in the western U.S.
  • General contact information for healthcare providers
  • Employee contact information, including job titles and phone numbers
Affected Records
More than 1,400 U.S. patient records were accessed; identifying and healthcare-provider contact information was accessed for fewer than 50 other patients. An undisclosed number of employee records were also exposed.
Operational Impact
Novocure said no medical treatment devices were accessed, its ability to operate was not compromised, and its systems remained functional.
Ransom Or Extortion
Unknown. BleepingComputer asked whether Novocure had contacted the attackers about a ransom, but no response was available.
Claim Status
confirmed

Industries

HealthcareHowever, for fewer than 50 other patients in the western U.S, the threat actors accessed identifying information and general contact information for healthcare providers.