Cyber-extortion group FulcrumSec claimed responsibility for a major data breach at Novo Nordisk involving 1.3 terabytes of stolen information.
The group began leaking files after the pharmaceutical giant reportedly refused a $25 million ransom demand. Novo Nordisk acknowledged the security incident on June 11, confirming unauthorized access and data exfiltration from internal systems.
The stolen cache allegedly includes proprietary drug information and manufacturing operation details. The breach also compromised clinical trial records and internal artificial intelligence models. FulcrumSec claims it gained network access in March using a GitHub access token.
Exposed patient data from clinical trials was pseudonymized and not directly identifiable. The breach also compromised the personal data of healthcare professionals.