Novocure Limited NVCR recently disclosed that it identified unauthorized access to certain information systems through a subsidiary in mid-August 2026. Following detection, the company activated its cybersecurity response plan, implemented containment measures and launched an internal investigation with support from independent cybersecurity forensic experts.
Based on the investigation so far, the exposed information includes internal patient ID numbers associated with more than 1,400 U.S. patient records. These IDs are used internally and were not accompanied by patient names or other identifying information.
Data relating to fewer than 50 other patients in the western U.S. included additional identifying information. The incident also exposed general contact information for healthcare providers and Novocure employees, including job titles and phone numbers. The company said that its medical treatment devices were not accessed and that its systems remained fully functional.
NVCR Stock Trend Following the News
Shares of Novocure have gained 3.2% since the announcement on Sep. 1. Year to date, shares of the company have rallied 38.8%, outperforming the industry’s 10.2% growth and the S&P 500’s 12.1% return.
The cybersecurity incident adds to growing concerns around data security across the healthcare and medical technology industry. Novocure said that its ability to operate has not been compromised and does not believe the incident will have a material or likely material impact on its financial condition. Transparent communication and timely regulatory notifications may further support trust among patients, healthcare providers, employees and investors.
NVCR currently has a market capitalization of $2.09 billion.
Image Source: Zacks Investment Research
Cybersecurity Incidents Across Medtech Industry
Novocure’s disclosure comes amid a series of cybersecurity incidents affecting major healthcare and medtech companies in 2026. Boston Scientific experienced a cybersecurity incident in August that disrupted access to certain systems and business applications, affecting aspects of order processing and shipping. McKesson disclosed a data breach involving unauthorized access to third-party applications, with the ShinyHunters hacking group claiming responsibility and alleging the theft of data from its Oncology & Multispecialty and Medical-Surgical business units.
Abbott Laboratories reported two separate cyber incidents involving unauthorized access to certain internal systems in its Cancer Diagnostics business and its LabCentral portal; the company said that the incident involved a vishing attack and did not affect its products, manufacturing or patient services. West Pharmaceutical Services faced a cyberattack in May that involved data exfiltration and encryption of certain systems, temporarily disrupting portions of its operations.
