Oncology Firm Novocure Discloses Cyberattack Affecting More Than 1,400 Patients

Summary

Medtech and oncology firm Novocure disclosed in a 1 September SEC Form 8-K that it detected unauthorised access to some systems via a subsidiary in mid-August, with containment and an external forensic investigation under way. Impact is reported as limited: roughly 1,400 US patients had internal company ID numbers exposed (no names or identifying data), fewer than 50 patients in the Western US had additional identifying information exposed, and general contact information for US healthcare providers and employees was affected. Novocure says no medical treatment devices were accessed, operations are fully functional and it does not expect a material financial impact; the threat group and nature of the incident were not disclosed.