Novocure Cyberattack: More Than 1,400 U.S. Patient Records Exposed

Novocure disclosed that a subsidiary became aware of unauthorized access to some company information systems in mid-August 2026. Its investigation found exposure of limited patient, healthcare-provider, and employee information—but the company said its medical treatment devices were not accessed, its ability to operate was not compromised, and all systems were fully functional. 1

What patient information was exposed?

The largest group affected involved more than 1,400 U.S. patient records. The accessed information for these records was limited to Novocure’s internal patient ID numbers. Novocure said those IDs are used solely internally and that no patient names or other identifying information were exposed for this group. 1

A separate, smaller group involved fewer than 50 patients in the western United States. For those patients, the accessed data included additional identifying information. Novocure did not specify the particular identifiers in its filing. 1

What provider and employee information was involved?

The company said the exposed data also included:

• General contact information for healthcare providers that work with Novocure.
• Employee contact information, including job titles and phone numbers. 1

The filing did not state how many providers or employees were affected. 1

What was not compromised?

Novocure said the unauthorized party did not gain access to its medical treatment devices. It also said the incident did not compromise the company’s ability to operate and that its systems were fully functional. 1

That distinction matters for a company operating in healthcare: the disclosure describes an information-security and data-exposure incident, not a reported compromise of treatment devices or a reported operational outage.

How Novocure responded

After detecting the incident, Novocure said it activated its cybersecurity response plan, implemented containment measures, and began an internal investigation. It also retained independent cybersecurity forensic specialists to help investigate the event and review the data that had been accessed. 1

The company said it was assessing its notification obligations and would make notifications as required, including to affected patients. 1

Did Novocure expect a financial impact?

As of its September 1, 2026 filing, Novocure said it did not believe the incident had, or was reasonably likely to have, a material effect on its financial condition or results of operations. The investigation was still ongoing, so that assessment reflected the information available at the time of disclosure. 1

How it compares with other healthcare cyber incidents in 2026

Novocure’s disclosure came amid a series of cyber incidents affecting healthcare and medical-technology companies, but their effects varied considerably.

• Abbott said two separate incidents involving internal systems did not affect its operations.
• Medtronic said an attack on a corporate IT network did not affect products, patient needs, manufacturing, or distribution, and was not expected to materially affect its business or financial results.
• West Pharmaceutical Services said it restored operations after an attack and expected no material effect on its 2026 financial outlook.
• Stryker reported significant disruption to order processing, manufacturing, and customer deliveries; Reuters also reported that some patient procedures were postponed.
• Boston Scientific reported disruptions to global operations, including systems used to process and ship customer orders. 18
• Novo Nordisk said unauthorized actors copied certain information from internal IT systems, including patient data from some clinical trials.

The central takeaway from Novocure’s report is therefore specific: patient-related and contact data was exposed, including more than 1,400 internal patient IDs and additional identifying data for fewer than 50 patients, but Novocure reported no device access or operational disruption at the time of its filing. 1