Skip to content
OriginalSign in
Image: SecurityOnline

SecurityOnlineDo Son

Novo Nordisk breach leaks AI models from Dragonfly project

Part of the Nordisk story · since 14 Jun

Quiet for 19 weekslast report 21 Jun10 articles5 outlets
14 Jun · DataBreaches first24 Aug17 Sep11 OctNowThis article5th of 10
  • Sun 14 Jun, 14:05 UTC. DataBreaches, first report. Novo Nordisk reports breach of deidentified patient trial data.
  • Mon 15 Jun, 11:55 UTC. SecurityWeek, its first report on the story. Novo Nordisk breach exposes trial patient and staff data.
  • Mon 15 Jun, 13:48 UTC. Security Affairs, its first report on the story. Novo Nordisk breach exposes trial data and provider contacts.
  • Tue 16 Jun, 01:30 UTC. DataBreaches. Novo Nordisk Faces Data Breach Exposing 11,500 Trial Records.
  • Tue 16 Jun, 08:20 UTC. SecurityOnline, its first report on the story. Novo Nordisk breach leaks AI models from Dragonfly project. This article, 5th of 10.
  • Tue 16 Jun, 12:47 UTC. SecurityWeek. FulcrumSec Claims Novo Nordisk Hack, Steals 1.3TB of Trial Data.
  • Tue 16 Jun, 18:31 UTC. DataBreaches. One threat actor demanded $50 million from Novo Nordisk. Another one demanded $25 million. Neither got paid..
  • Wed 17 Jun, 10:10 UTC. Security Affairs. FulcrumSec Targets Novo Nordisk, Leaks Clinical and Research Data.
  • Thu 18 Jun, 20:10 UTC. Dark Reading, its first report on the story. Novo Nordisk breach exposes 1.3TB after GitHub token leak.
  • Sun 21 Jun, 16:56 UTC. DataBreaches. Novo Nordisk data leak follows ransom demands, shares stay steady.

Novo Nordisk experienced a significant data breach where attackers accessed and stole sensitive information, including fully trained AI models, proprietary datasets, training codebases, and logs. The hackers claimed to have exfiltrated 16.7GB from a project named Dragonfly and various internal documents and configurations. The breach also involved some pseudonymized data related to clinical trial patients.

Novo Nordisk confirmed the cybersecurity incident occurred between June 11 and 12, 2026, and has involved external cybersecurity experts for investigation. The stolen AI resources could threaten the company's competitive edge in drug discovery, especially in light of a ransom demand from the attackers.

How the story developed

All 10 articles
Quiet for 19 weekslast report 21 Jun10 articles5 outlets

10 articles from 5 outlets since 14 Jun. Quiet since 21 Jun. This was the 5th report, 2 days after the first.

Now14 Jun1516171819202122231 NovFirst reportDataBreaches · 14 Jun, 14:05This article5th of 10 · day 2Picked up againafter 3 days quiet
  • Sun 14 Jun, 14:05 UTC. DataBreaches, first report. Novo Nordisk reports breach of deidentified patient trial data.
  • Mon 15 Jun, 11:55 UTC. SecurityWeek, its first report on the story. Novo Nordisk breach exposes trial patient and staff data.
  • Mon 15 Jun, 13:48 UTC. Security Affairs, its first report on the story. Novo Nordisk breach exposes trial data and provider contacts.
  • Tue 16 Jun, 01:30 UTC. DataBreaches. Novo Nordisk Faces Data Breach Exposing 11,500 Trial Records.
  • Tue 16 Jun, 08:20 UTC. SecurityOnline, its first report on the story. Novo Nordisk breach leaks AI models from Dragonfly project. This article, 5th of 10.
  • Tue 16 Jun, 12:47 UTC. SecurityWeek. FulcrumSec Claims Novo Nordisk Hack, Steals 1.3TB of Trial Data.
  • Tue 16 Jun, 18:31 UTC. DataBreaches. One threat actor demanded $50 million from Novo Nordisk. Another one demanded $25 million. Neither got paid..
  • Wed 17 Jun, 10:10 UTC. Security Affairs. FulcrumSec Targets Novo Nordisk, Leaks Clinical and Research Data.
  • Thu 18 Jun, 20:10 UTC. Dark Reading, its first report on the story. Novo Nordisk breach exposes 1.3TB after GitHub token leak.
  • Sun 21 Jun, 16:56 UTC. DataBreaches. Novo Nordisk data leak follows ransom demands, shares stay steady.
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 10 articles as a list
  1. Sun 14 JunDay 01
    1. Novo Nordisk reports breach of deidentified patient trial data14:05 · DataBreaches · First report
  2. Mon 15 JunDay 12
    1. Novo Nordisk breach exposes trial patient and staff data11:55 · SecurityWeek
    2. Novo Nordisk breach exposes trial data and provider contacts13:48 · Security Affairs
  3. Tue 16 JunDay 24
    1. Novo Nordisk Faces Data Breach Exposing 11,500 Trial Records01:30 · DataBreaches
    2. Novo Nordisk breach leaks AI models from Dragonfly project08:20 · SecurityOnline · This article, 5th of 10
    3. FulcrumSec Claims Novo Nordisk Hack, Steals 1.3TB of Trial Data12:47 · SecurityWeek
    4. One threat actor demanded $50 million from Novo Nordisk. Another one demanded $25 million. Neither got paid.18:31 · DataBreaches
  4. Wed 17 JunDay 31
    1. FulcrumSec Targets Novo Nordisk, Leaks Clinical and Research Data10:10 · Security Affairs
  5. Thu 18 JunDay 41
    1. Novo Nordisk breach exposes 1.3TB after GitHub token leak20:10 · Dark Reading

  6. Quiet for 3 days

    Sun 21 JunDay 71
    1. Novo Nordisk data leak follows ransom demands, shares stay steady16:56 · DataBreaches · Picked up again

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in