A hacker group claims to hold over a terabyte of Novo Nordisk data and says it may sell parts after ransom talks failed.<\/p>\n
June 16 \u2013 a cyberextortion group said on Tuesday that it had stolen more than a terabyte of data from pharmaceutical giant Novo Nordisk and said it was considering selling a portion of the data after a failed demand for the company to pay 25 million dollars.<\/p>\n
FulcrumSec, a cyberextortion group that emerged in October 2025, said in a lengthy post on its site that it had spent more than two months inside Novo Nordisk\u2019s networks, stealing data. The post states that among the data are the company\u2019s source code, confidential information about approved and unapproved medicines, clinical trial data, employee data, data on doctors and patients, information related to the company\u2019s production facilities, and internal information about artificial intelligence models.<\/p>\n
Novo Nordisk did not immediately respond to requests for comment regarding FulcrumSec\u2019s claims. Reuters was unable to verify the authenticity of the data released by the hacker group, and FulcrumSec itself did not provide comment when contacted.<\/p>\n
The Danish company disclosed the cybersecurity incident on June 11, describing unauthorized access to a limited number of internal IT systems, including access to certain personal data.<\/p>\n
FulcrumSec stated that after Novo Nordisk refused to pay $25 million, they were considering private sales of portions of data related to certain drugs and other internal data.<\/p>\n
\u201cconsideration of private sales\u201d<\/p>\n
\u2013 FulcrumSec<\/p>\n
Thomas Wilkan, head of research at the cybersecurity firm Lab-1, which tracks FulcrumSec, noted that the group is generally quite legitimate in terms of both its capabilities and its claims.<\/p>\n
\u201cusually quite legitimate in terms of both their capabilities and their claims\u201d<\/p>\n
\u2013 Thomas Wilkan<\/p>\n
FulcrumSec said it does not intend to share data related to thousands of employees and doctors, as well as roughly 11,500 annotated patient data records from clinical trials. They also said they would not disclose data related to operational technology and software for interfacing with sensors and machines at Novo Nordisk\u2019s production facilities, as part of what they call the so-called \u201charm-reduction strategy\u201d.<\/p>\n
\u201charm-reduction strategy\u201d<\/p>\n
\u2013 FulcrumSec<\/p>\n
Novo Nordisk is known for its obesity and diabetes medications, including Wegovy and Ozempic.<\/p>\n
DataBreaches.net, a blog focused on cybersecurity, encryption and data extortion, reported on June 15 that FulcrumSec, on June 14, informed the blog that it had gained access to Novo Nordisk\u2019s network in March, and cited allegedly correspondence with Novo Nordisk from June 1 onward, containing more than 700,000 files totaling about 1.3 terabytes of data.<\/p>\n
VX-Underground, a site researching malware and a repository, also reported on Monday about an unnamed hacker who allegedly hacked Novo Nordisk. FulcrumSec, in its statement, said that their attack was separate.<\/p>\n
Experts note that incidents of this scale highlight the growing threat to the pharmaceutical sector and emphasize the need to bolster cybersecurity for companies handling sensitive data and manufacturing lines.<\/p>\n","protected":false},"excerpt":{"rendered":"A hacker group claims to hold over a terabyte of Novo Nordisk data and says it may sell…\n","protected":false},"author":2,"featured_media":109357,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_share_on_mastodon":"0"},"categories":[271],"tags":[49629,55343,38,272,55344,55345,55346],"class_list":["post-109356","post","type-post","status-publish","format-standard","has-post-thumbnail","category-novo-nordisk","tag-data-leak","tag-fulcrumsec","tag-news","tag-novo-nordisk","tag-novo-nordisk-breach","tag-pharma-cyberattack","tag-ransomware"],"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@dk\/116761527744032477","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/posts\/109356","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/comments?post=109356"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/posts\/109356\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/media\/109357"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/media?parent=109356"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/categories?post=109356"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/tags?post=109356"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}