FulcrumSec demands 160 million kroner from Novo Nordisk after two months of system access
The hacker group FulcrumSec claims to have stolen one terabyte of data from Novo Nordisk and demanded 25 million dollars in ransom. Novo Nordisk confirms it is aware of the allegations.
Hacker group claims data breach at Novo Nordisk and threatens to sell stolen information
The cyber-extortion group FulcrumSec claims to have had unauthorised access to Novo Nordisk's IT systems for more than two months and to have stolen one terabyte of data during that period, according to news agency Reuters, citing the group's own information. According to Politiken, the demanded ransom of 25 million dollars corresponds to approximately 160 million kroner.
The group states on its website that the stolen material includes confidential information about both released and unreleased medicines as well as data about employees, doctors and patients.
Novo Nordisk told the outlet Finans that the company is "aware of the claim that data allegedly copied externally without permission from our systems has been published online". "We take this seriously and continue to maintain the operation of our platforms. We are in contact with the relevant authorities," the company stated.
According to Reuters, FulcrumSec is now investigating the possibility of selling part of the material after Novo Nordisk allegedly refused to meet the demand.
Reuters has not been able to verify the authenticity of the data which the group has published on its website, according to the news agency.
Six days ago, Novo Nordisk announced in a press release that the company had been subject to a hacker attack and that unauthorised parties had gained access to internal IT systems. The company confirmed at that time that data had been stolen, but disclosed neither who was responsible nor exactly when the attack took place.
Source: Politiken