A cyber extortion group has claimed it stole more than a terabyte of data from Danish pharmaceutical giant Novo Nordisk after the company allegedly refused to pay a $25 million ransom.
The group, known as FulcrumSec, said on Tuesday it had spent more than two months inside Novo Nordisk’s internal systems, extracting sensitive information including source code, proprietary drug data, clinical trial records and internal artificial intelligence models.
In a statement posted online, FulcrumSec said the breach included data on both released and unreleased pharmaceutical products, as well as employee, physician and patient information.
Novo Nordisk confirmed it was aware of the claims, saying it had identified a cybersecurity incident earlier this month involving unauthorised access to a limited number of internal IT systems.
The company said it was in contact with relevant authorities and that its core platforms remained operational.
Reuters said it could not independently verify the authenticity of the leaked material.
FulcrumSec said it first contacted Novo Nordisk executives on 1 June and claimed company representatives responded two days later through a Proton Mail address, requesting specific files as proof of the breach.
The group said it is now considering private sales of portions of the data after negotiations failed.
Novo Nordisk, one of the world’s largest pharmaceutical companies, is best known for blockbuster obesity and diabetes treatments Wegovy and Ozempic, which have become central to the fast-growing global weight-loss drug market.
Cybersecurity researchers say FulcrumSec is a relatively new but increasingly active extortion group. Thomas Willkan of Lab-1 said the group has built a reputation for credible breaches and technical sophistication.
The hackers said they would not release certain datasets, including files related to roughly 11,500 pseudonymised clinical trial participants and sensitive operational technology used in production facilities, citing what they described as a “harm-reduction strategy.”
The breach underscores growing cybersecurity risks facing the pharmaceutical industry, where clinical trial data, proprietary drug research and manufacturing systems have become high-value targets for ransomware and extortion groups.
Industry analysts warn such incidents can carry major financial, legal and reputational consequences, particularly when patient or trial data is involved.
Russia and Ukraine have exchanged 10 prisoners of war each in Belarus, Moscow's Human Rights Commissio...
Secretary of State Marco Rubio told allied foreign ministers Washington will focus on sanctions and other pressure on Iran “for the time bein...
Kazakhstan is considering the Baku-Supsa pipeline as an alternative oil export route after Caspian Pipeline Consortium disruptions cost the country...
Oil prices fell after the U.S. expanded economic sanctions on Iran, as Tehran vowed to retaliate and warned it had tools to respond, raising concerns over potential disruption to regional oil supplies.
Kyiv has recently received a small number of U.S.-made Patriot interceptors capable of downing Russian ballistic missiles, Ukrainian President Volodymyr Zelenskyy has said. It comes as Britain and France pledged stronger military support for Ukraine.
Secretary of State Marco Rubio told allied foreign ministers Washington will focus on sanctions and other pressure on Iran “for the time being”, Axios reports. Meanwhile, Iran and Oman have resumed talks on a temporary shipping route through the Strait of Hormuz.
Russia and Ukraine have exchanged 10 prisoners of war each in Belarus, Moscow's Human Rights Commissioner, Yana Lantratova, has said.
At least nine people have been killed and hundreds of tourists are missing after a massive landslide triggered catastrophic flooding near Nepal’s Himalayan border with China’s Tibet region.
Russia and Ukraine have exchanged 10 prisoners of war each in Belarus, Moscow's Human Rights Commissioner, Yana Lantratova, has said.
Meta Platforms has agreed to pay up to $16.68 billion and make sweeping changes to Facebook and Instagram to settle claims that its platforms put children and teenagers at risk.
At least nine people have been killed and hundreds of tourists are missing after a massive landslide triggered catastrophic flooding near Nepal’s Himalayan border with China’s Tibet region.
Instagram Chief Adam Mosseri has acknowledged that few teenagers used Instagram’s “Take a Break” feature before it became a default setting, as Meta faces a major U.S. trial over child safety.
Start your day informed with AnewZ Morning Brief. Here are the top news stories for the 26th of August, covering the latest developments.
You can download the AnewZ application from Play Store and the App Store.
What is your opinion on this topic?
Leave the first comment