Novo Nordisk Confirms Data Theft: What Attackers Took and What They Didn’t

Novo Nordisk confirmed an IT security incident in which attackers accessed internal systems and exfiltrated data related to some clinical trials (pseudonymized patient IDs, trial details, biomarkers, and lifestyle data) and non-pseudonymized healthcare provider contact information (names, registration numbers, emails, phone and WhatsApp details). The company engaged external cyber experts, notified authorities, took affected systems offline as a containment measure, and stated that patient identity information was not exposed while advising vigilance against potential phishing or social engineering.