Novocure, a global health technology firm, confirmed that a mid-August cyberattack compromised sensitive records. The breach impacts more than 1,400 U. S. cancer patients and an undisclosed number of staff members. The incident highlights ongoing security challenges for major oncology providers managing vast patient databases across multiple international locations.
The company disclosed that unauthorized access occurred during the second half of August. Attackers gained entry to systems holding personal information for both workforce and client groups. Novocure operates with over 1,300 employees worldwide, making its digital infrastructure a significant target. The exposure includes identifiable data linked to individuals receiving treatment for various forms of cancer.
The primary concern involves the specific subset of U. S.-based patients whose files were accessed. While the total headcount of affected employees remains unknown, the scale suggests a broad intrusion. Novocure serves a diverse patient population, meaning the leaked data likely contains medical histories and contact details. The timing of the attack coincides with routine system maintenance windows, potentially allowing attackers to slip past initial detection protocols. Security teams are currently auditing logs to determine exactly which fields were viewed or copied.
Novocure immediately initiated its incident response plan upon detecting anomalies. IT specialists isolated affected servers to prevent further lateral movement within the network. The firm notified relevant regulatory bodies and began preparing communication letters for impacted individuals. No ransom demand was publicly reported, suggesting the attackers may have prioritized data exfiltration over encryption. The company emphasized that it is working with external forensic experts to validate the extent of the compromise.
How many people are affected by this data breach? More than 1,400 U. S. cancer patients are confirmed as affected. An additional, unspecified number of Novocure employees also had their data exposed.
When did the cyberattack occur? The intrusion took place in mid-August. The company recently finalized its assessment of the incident scope.
What type of data was compromised? Personal and medical information belonging to patients and staff was accessed. Specific fields include identifiers and health-related records.