Hacking Group Claims Major Breach of Novo Nordisk, Attempted $25 Million Extortion
A cyber extortion group, FulcrumSec, has claimed responsibility for a significant breach of Novo Nordisk's network, reportedly stealing approximately 1.3 terabytes of data. The stolen information allegedly includes sensitive details such as source code, drug research, clinical-trial records, and employee data. FulcrumSec states it unsuccessfully demanded $25 million from the pharmaceutical company and is now considering options for the data, including potential sales. Novo Nordisk has acknowledged claims regarding unauthorized data copying and publication, stating it is taking the matter seriously, maintaining operational continuity, and is in contact with relevant authorities.
A cyber extortion group identified as FulcrumSec has claimed to have breached the network of pharmaceutical giant Novo Nordisk, according to a report by Reuters. The group, which states it emerged in October 2025, alleges it spent over two months within Novo Nordisk's systems, exfiltrating roughly 1.3 terabytes of data.
The purportedly stolen data includes a wide range of sensitive information, such as company source code, proprietary details on both released and unreleased drugs, clinical trial data, and information pertaining to employees, doctors, and patients. The group also claims to have acquired data related to company processing facilities and internal AI models.
FulcrumSec asserts it attempted to extort $25 million from Novo Nordisk, but the demand was unsuccessful. Following this, the group is reportedly exploring options for the stolen data, including selling portions of it.
Communication between the parties allegedly occurred on June 3, approximately 48 hours after FulcrumSec's initial contact with unnamed company executives. Novo Nordisk representatives reportedly used a Proton Mail email address to respond, verifying their identity by requesting specific files that only the company would recognize.
Despite considering selling the data, FulcrumSec indicated a preference not to, suggesting that "open sourcing it is a more effective deterrent for future companies to avoid paying." The group also stated it would withhold certain data, citing a "harm-reduction strategy." This includes information on thousands of employees and physicians, roughly 11,500 pseudonymized clinical trial patients, and data related to operational technology and software used in production facilities.
In response to these claims, a Novo Nordisk spokesperson stated the company "is aware of claims that data allegedly copied externally without authorization from our systems has been published online." The company emphasized that it takes the matter seriously, maintains continued operations of its main platforms, and is in contact with relevant authorities.
(Source: Slashdot)
