Published 2 days ago • loading... • Updated 1 day ago
Novo Nordisk Flags Patient Data Breach From some Clinical Trials in Cyberattack
Novo said the exposed data was pseudonymized and that core business operations remain unaffected while it investigates with external cybersecurity experts.
On Thursday, Novo Nordisk identified a security incident in which external attackers copied clinical trial patient data from its internal IT systems without authorization, prompting the Danish pharmaceutical company to launch an investigation with external cybersecurity experts.
Attackers accessed clinical trial data including patient IDs, sex, year of birth, and health information, though Novo Nordisk stated this information is pseudonymized and does not enable any third party to identify participants by name.
The breach also exposed contact details for HCPs, including registration numbers, email addresses, phone numbers, WhatsApp information, and office locations, prompting Novo Nordisk to warn these individuals about unexpected messages impersonating colleagues.
Internal systems were taken offline to address the incident, though core business operations remain running as Novo Nordisk works to restore affected systems "in a controlled and safe manner."
Founded in 1923, Novo Nordisk employs around 67,900 people across 80 offices worldwide and produces GLP-1 receptor agonist drugs Wegovy and Ozempic, which remain unaffected by the incident.