Reported by 2 outlets
Novo Nordisk Breach — Two Separate Extortion Groups, Demands of $50M and $25M, Neither Paid
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 0.70 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.00 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
Novo Nordisk Breach — Two Separate Extortion Groups, Demands of $50M and $25M, Neither Paid
securityweek.com · 119d ago · June 17th, 2026
New details emerged about the Novo Nordisk hack: two separate threat actors breached the Danish pharmaceutical giant. FulcrumSec (demanding $25M) accessed Novo Nordisk's systems via a GitHub access token in March, cloning repositories and finding additional credentials, stealing 1.3TB of data including undisclosed drug programs, proprietary compound structures, the Dicerna RNAi pipeline, and private AI models. A separate, unnamed threat actor demanded $50 million — also unpaid. Both groups have threatened to leak the stolen data. The stolen clinical trial data was pseudonymized and cannot be directly linked to patients by name.
Previously covered June 16: FulcrumSec leaks Novo Nordisk data after $25M demand goes unpaid.
-
update from malware.news
More Novo Nordisk data dumped by FulcrumSec
malware.news · 62d ago · August 13th, 2026
FulcrumSec has dumped more data from its attack that Novo Nordisk first disclosed on June 11. FulcrumSec writes: Today we are releasing all of the Novo Nordisk data not included in our original post: their complete enterprise HuggingFace AI/ML ecosystem. 30 models, 70 datasets, and half a terabyte of proprietary Cell Painting microscopy images. 1.05… Source Article Link: https://databreaches.net/2026/08/12/more-novo-nordisk-data-dumped-by-fulcrumsec/