Novocure’s September 1 filing with the US Securities and Exchange Commission puts the blast radius of an August intrusion at roughly 1,400 US cancer patients, with exposure mostly limited to internal company ID numbers and no patient names taken. The medtech firm, best known for Tumor Treating Fields therapy delivered through its Optune devices, discovered the unauthorized access through one of its subsidiaries in mid-August and says fewer than 50 patients in the western United States had files containing additional identifying information.
Beyond patient records, the attackers reached general contact information for the US healthcare providers Novocure works with and for the company’s own employees, including job titles and phone numbers. Novocure, which employs about 1,300 people and keeps its global headquarters in Baar, Switzerland, with US offices in Portsmouth, New Hampshire, said the intrusion did not reach its treatment devices, did not disrupt operations, and is not expected to have a material effect on its finances. Third-party forensic experts are assisting an ongoing investigation.
The company declined to name the group responsible. The filing lands days after the ShinyHunters extortion gang listed Novocure on its leak site threatening to publish stolen files, a claim the company had not confirmed at the time. Novocure also faces the wider reality of a bruising year for medical technology: Unlimited Technology Systems and CareCloud incidents each reached millions of patient records, and a Boston Scientific outage stalled device shipments worldwide.
For hospitals and oncology clinics that refer glioblastoma patients for Tumor Treating Fields therapy, the main downstream risk is phishing built on the exposed contact details. Novocure states that all systems are fully functional and that its investigation remains open.
