Global pharmaceutical giant Novo Nordisk is at the center of a significant cybersecurity controversy after a hacking group claimed responsibility for stealing a large volume of sensitive company data and demanding millions of dollars in exchange for keeping the information private.
According to reports, the cybercriminal group known as FulcrumSec alleges that it gained access to Novo Nordisk’s internal systems for an extended period and extracted more than a terabyte of confidential information. The attackers reportedly sought a ransom payment of $25 million but claim the company declined to negotiate.
The hackers say the stolen files include a wide range of information, such as internal documents, software source code, research-related material, employee records, and data connected to pharmaceutical development projects. Independent verification of these claims has not yet been completed.
Novo Nordisk, best known for diabetes and obesity treatments including Ozempic and Wegovy, has acknowledged a cybersecurity incident involving unauthorized access to some of its internal IT systems. The company stated that certain data was copied without authorization and that it is working with cybersecurity specialists and relevant authorities to investigate the matter.
The company has emphasized that its core business operations remain functional and that measures were quickly implemented to contain the incident and strengthen security controls.
Earlier disclosures from Novo Nordisk indicated that some information related to clinical trial participants may have been affected. However, the company noted that the exposed data was not directly linked to identifiable patient names and therefore may not immediately reveal the identities of individuals involved in the trials.
Cybersecurity experts note that pharmaceutical companies have become increasingly attractive targets for cybercriminal groups because of the high value of medical research, intellectual property, and patient-related information. The incident highlights the growing risks facing organizations that manage large volumes of sensitive healthcare and research data.
Investigations into the alleged breach are ongoing, and authorities are expected to continue assessing the scale of the attack and the authenticity of the data reportedly obtained by the hackers.
Key Highlights
- Hackers claim to have stolen more than 1 TB of Novo Nordisk data.
- An alleged $25 million extortion demand was reportedly rejected.
- The company has confirmed a cybersecurity incident affecting certain internal systems.
- Clinical trial-related information may have been impacted.
- Cybersecurity experts warn that healthcare and pharmaceutical firms remain prime targets for cyberattacks.
