Oncology company Novocure disclosed that a mid-August cybersecurity incident exposed internal records of more than 1,400 U.S. patients. The company activated its cybersecurity response plan, implemented containment measures, and launched an internal investigation. Importantly, access to its medical treatment devices was not obtained, and all systems remain fully functional.

The exposed data included internal patient ID numbers, general contact information for healthcare providers, and employee details such as job titles and phone numbers. A smaller subset — fewer than 50 patients in the western U.S. — had additional identifying information exposed. Novocure does not expect the incident to have a material financial impact.

The breach is part of a troubling surge in cyberattacks targeting the healthcare sector, with companies like Abbott, Stryker, Medtronic, Boston Scientific, Novo Nordisk, and West Pharmaceutical Services all recently affected.

By the Numbers:

• 1,400+ U.S. patient records exposed in the breach
• Fewer than 50 additional western U.S. patients had more sensitive identifying information compromised
• 6+ major healthcare companies hit by cyberattacks in the same recent period

Why it matters: The healthcare sector's vulnerability to cyberattacks poses serious risks to patient privacy and operational continuity. As attacks multiply across medical device makers, drugmakers, and oncology firms, the industry faces mounting pressure to strengthen cybersecurity infrastructure to protect sensitive patient data.