Novo Nordisk Breach Exposes Software Development Pipeline Risk

Novo Nordisk disclosed that attackers used an exposed GitHub personal access token to gain access to internal systems, reportedly spent months inside the network, and exfiltrated roughly 1.3TB (over 700,000 files) including source code, proprietary drug research, clinical trial participant data, internal AI models, and manufacturing records before demanding a $25M ransom; responsible groups (FulcrumSec and TheUSERS007) have publicly leaked portions of the stolen data.