Novocure cyberattack exposes data of over 1,400 U.S. patients and staff

Novocure disclosed a cyberattack in an SEC filing, saying unauthorized access to some information systems was discovered in mid‑August.

The breach exposed internal patient ID numbers for more than 1,400 U.S. patients, but no names; data for fewer than 50 western U.S. patients included additional identifying details. Contact information for healthcare providers and employees was also accessed.

The company emphasized that its medical devices were not compromised and operations remain fully functional. Novocure is investigating the incident and assessing regulatory and legal notification obligations, including informing affected patients.