2026 Novocure — mid-August cyberattack; 1,400+ U.S. cancer patient records + employee contacts (SEC)
Data compromised
More than 1,400 U.S. patient records with ID numbers (no patient names per company); fewer than 50 western U.S. patients with identifying information and provider contact details; undisclosed number of employee job titles and phone numbers
Technical writeup
Verified SEC disclosure — September 1, 2026. Novocure Inc. (global oncology / Tumor Treating Fields) filed an 8-K stating it discovered unauthorized access to some information systems in mid-August 2026. The company said attackers accessed more than 1,400 U.S. patient records containing ID numbers but not patient names; for fewer than 50 patients in the western U.S., identifying information and general healthcare-provider contact details were accessed. Employee contact information including job titles and phone numbers was also exposed. Novocure stated medical treatment devices were not accessed and operations remained fully functional. No ransomware attribution or victim census beyond patient-record counts was published at filing. recordsAffected 1400 from company minimum; companyConfirmed true.
Root cause
Unauthorized access to Novocure information systems discovered mid-August 2026; investigation ongoing per SEC Form 8-K (Sep 1)