Novo Nordisk hit by multi‑million‑dollar ransom demands after major data breach claimed by hacking groups

A cyber‑extortion group called FulcrumSec claims it infiltrated Novo Nordisk’s networks for over two months, exfiltrating more than 1.3 terabytes of sensitive data, including source code, proprietary drug information, clinical‑trial records, employee and patient data, and internal AI models.

FulcrumSec demanded a $25 million ransom, which Novo Nordisk refused to pay; the group responded by posting roughly 264 GB of the alleged data on the dark web and is now considering private sales of some of the stolen information.

Separately, another threat actor has reportedly demanded about $50 million from Novo Nordisk in connection with a second, smaller breach, bringing the total ransom exposure to multi‑million‑dollar levels; the company has not paid either group and continues to investigate with external cybersecurity experts and authorities.