Hackers steal AI models and drug data from Novo Nordisk
Danish pharmaceutical company Novo Nordisk reported a data breach affecting internal IT systems in early June 2026. Hacker group FulcrumSec claimed responsibility for stealing over one terabyte of data including unreleased drug information, clinical trial data, employee and patient records, production facility details, and internal AI models, demanding $25 million before announcing plans to sell the data.
What happened
Hacker group FulcrumSec claimed on June 16, 2026 that it infiltrated Novo Nordisk's internal network for over two months and stole more than 1 terabyte of data.
The group demanded 25 million dollars; when Novo Nordisk refused, FulcrumSec announced plans to sell some of the stolen data privately.
Stolen data reportedly included company source code, proprietary information on released and unreleased drugs, clinical trial data, employee and patient information, production facility information, and internal AI model information.
Reported impact
Novo Nordisk disclosed on June 11, 2026 that unauthorized access had occurred to a limited number of internal IT systems, with some personal data included.
The company confirmed awareness that data allegedly copied from its systems had been posted online, though main platforms continued operating normally.
Index analysis
Security researchers at Lab-1 assessed that FulcrumSec's capabilities and claims were generally credible.
The stolen files comprised approximately 700,000 files totaling 1.3 terabytes, according to cybersecurity blog DataBreaches.net.
FulcrumSec emerged in October 2025; this attack began in March 2026.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.