Unauthorized access exposed internal patient ID numbers tied to over 1,400 U.S. patient records at NovoCure, while other patient and contact data was also accessed. NovoCure says medical treatment devices and operations were unaffected, and it currently expects no material financial impact while investigation and notification assessments continue.

Key Highlights

  • Medical treatment devices were not accessed, and NovoCure said all systems remain fully functional.
  • The exposed information included general contact details for healthcare providers and employees.
  • NovoCure activated containment measures, began an internal investigation and engaged independent Cybersecurity experts.

Unauthorized access to NovoCure Ltd (NASDAQ: NVCR).'s information systems exposed internal patient ID numbers connected to over 1,400 U.S. patient records. NovoCure said those IDs were used internally and that patient names or other identifying data for those records were not exposed. The company also said treatment devices were not accessed and its systems remain fully functional.

Cybersecurity Response And Exposed Information

A NovoCure Subsidiary activated the company’s cyber response plan after identifying the unauthorized access. It put containment measures in place and started an internal investigation, supported by independent cybersecurity forensic experts reviewing the data involved. The information identified so far also includes patient data containing additional identifying information, general contact details for healthcare providers, and employee contact information such as Job titles and phone numbers. NovoCure is assessing its legal and regulatory notification obligations and plans to notify affected patients as required. The company said it takes its obligations to protect patient-data privacy and security seriously.