Novo Nordisk Confirms Cyberattack Exposing Patient Data and AI Assets

Novo Nordisk disclosed a cyberattack (detected June 11–12, 2026) in which limited non-public clinical-trial records (pseudonymized patient IDs, demographics, biomarkers, immunogenicity and lifestyle data) and sizable AI research assets (a 16.7 GB multimodal model checkpoint, ~407 MB training datasets, ~50 MB source code including model and training pipeline, ~53 GB container images, logs and infrastructure configs) were reportedly exfiltrated; the company says core operations remain unaffected, has engaged external cybersecurity experts, notified authorities, and attackers are seeking to extort the firm with threats to sell stolen data and IP.