Almeida Law Group is investigating a data breach at Novocure Inc. If you were affected, contact Almeida Law Group.
About Novocure Inc.
Novocure is a global commercial-stage oncology company that develops, manufactures, and commercializes Tumor Treating Fields (TTFields) therapy, a non-invasive cancer treatment that uses electric fields to disrupt cancer cell division. Its products include Optune Gio for glioblastoma and Optune Lua for malignant pleural mesothelioma; in February 2026, the company received FDA approval to treat pancreatic cancer using the same technology. Novocure is publicly traded on NASDAQ (NVCR), incorporated in Jersey (Channel Islands), and headquartered in Root (Baar), Switzerland, with U.S. operations in Portsmouth, New Hampshire and Chesterbrook, Pennsylvania. Because Novocure works directly with cancer patients, it holds a combination of patient records, healthcare provider contact information, and employee data—making a breach of its systems particularly sensitive.
What Happened?
Novocure Inc. was listed in a HHS Office for Civil Rights breach portal report filed on September 9th, 2026, identifying a hacking/IT incident affecting a network server. The filing lists 1,464 individuals affected and classifies Novocure as a healthcare provider. No business associate was identified as involved.
Novocure disclosed the incident through an SEC Form 8-K filed on September 1st, 2026, stating that unauthorized access to its information systems was detected in mid-August 2026 through a subsidiary. The company activated its cybersecurity response plan, implemented containment measures, and engaged independent forensic experts. Novocure confirmed that no medical treatment devices were accessed and that no operational disruption occurred. According to Novocure’s SEC disclosure, the exposed data included internal company patient ID numbers for over 1,400 U.S. patient records (with no patient names or other identifying information for most); additional identifying information for fewer than 50 patients in the western United States; general contact information for healthcare providers; and general contact information for Novocure employees, including job titles and phone numbers. The company stated it does not expect the incident to have a material financial impact.
Separately, the extortion group ShinyHunters claimed responsibility for the attack on approximately August 22nd, 2026, issuing a “final warning” deadline of August 24th, 2026. BleepingComputer reported that ShinyHunters subsequently leaked an alleged 33GB archive of files taken from Novocure’s systems. These are attacker-side allegations; Novocure has not publicly attributed the breach to any specific threat actor. At least one law firm, Shamis & Gentile P.A., has announced it is investigating the incident for a potential class action lawsuit, though no filed case has been confirmed as of the research date.
Key Facts at a Glance
- Company or Organization: Novocure Inc.
- Industry: Healthcare / Medical Devices / Oncology
- Location: Headquartered in Root (Baar), Switzerland; U.S. operations in Portsmouth, NH and Chesterbrook, PA (HHS filing lists PA)
- Incident type: Hacking/IT Incident (Network Server)
- Date breach discovered: Mid-August 2026
- Date of consumer notification: September 1st, 2026 (SEC Form 8-K disclosure)
- Total persons affected: 1,464
- Litigation status: Shamis & Gentile P.A. has announced an investigation into a potential class action; no filed case confirmed as of the research date
- Source: HHS Office for Civil Rights breach portal report; SEC Form 8-K (September 1st, 2026); BleepingComputer; HIPAA Journal; Paubox
What Should You Do?
If you received a notice from Novocure or believe you may have been affected, there are practical steps you can take now. Because patient ID numbers and, for some individuals, additional identifying information were exposed, consider placing a fraud alert or credit freeze with each of the three major credit bureaus—Equifax, Experian, and TransUnion—to make it harder for anyone to open new accounts in your name. You can request free copies of your credit reports at AnnualCreditReport.com and review them carefully for unfamiliar activity. If your medical information or patient records were involved, review any Explanation of Benefits statements from your health insurer and request copies of your medical records to check for errors or services you did not receive. If Novocure offers identity theft protection enrollment, sign up promptly and note any deadline. For additional guidance if identity theft does occur, visit IdentityTheft.gov.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
