Novocure data breach affects more than 1,400 cancer patients
Novocure data breach exposes records of over 1,400 cancer patients and employees.
Healthtech company Novocure has disclosed a cyberattack that exposed the data of over 1,400 U.S. cancer patients and an undisclosed number of employees. The incident, discovered in mid-August, involved unauthorized access to information systems, leading to the exposure of patient ID numbers and, for a smaller subset, identifying and contact information for healthcare providers. Employee contact details were also compromised.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Novocure?
Get an email when a new story names Novocure, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonNovocure suffered a cyberattack resulting in unauthorized access to systems containing sensitive health and contact information for over 1,400 cancer patients and an undisclosed number of employees. The breach highlights the critical risk of inadequate access controls and insufficient monitoring in healthcare environments where patient data is highly sensitive and heavily regulated. Delayed discovery — with the incident found in mid-August but likely occurring earlier — suggests gaps in real-time detection and logging capabilities. Healthcare organizations handling Protected Health Information (PHI) face severe consequences under HIPAA when access controls and monitoring fail to prevent or promptly detect intrusions.
What helps against this
How we list vendors- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
- Security monitoring (SIEM)
Logs from everywhere end up in one place, with alerts that someone actually sees.
- Incident response retainer
Experts are on call before the worst day, not searched for during it.