Novo Nordisk said it identified unauthorized access to a limited number of internal IT systems and found certain non-public data, including personal data, was copied externally; some systems were taken offline while core operations continued [1]. The company said affected clinical-trial patient data is pseudonymized and not linked to names or other direct identifiers; according to BleepingComputer, it also warned healthcare professionals to watch for suspicious messages and calls [1][2]. Novo Nordisk recommends trial patients remain vigilant and report anything unusual they believe could be linked to the incident [1].
Novo Nordisk internal systems breached; pseudonymized clinical-trial patient data copied out
1 min read
- Disclosed
- Jun 12, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 11, 2026
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Healthcare
What to do nowOur advice
- Clinical-trial patients should remain vigilant and report anything unusual to Novo Nordisk [1].
- Healthcare professionals should beware of unexpected messages or calls impersonating colleagues .
Timeline
Technical details
Remediation
Vendor guidance
- 1Stay vigilant and report anomalies verify[1]
Trial patients should report anything unusual possibly linked to the incident to Novo Nordisk.
References
Official / primary1
- [1]Novo Nordisk2026-06-12Accessed 2026-11-11Snapshot 2026-11-11 sha256 f23d0f3991ff
“While our investigation and response are ongoing, we have discovered that certain non-public data, including personal data, was copied externally without authorisation. We are informing the impacted parties as appropriate.”
Media1
- [2]
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.