UPDATED: September 8, 2026

Novocure Data Breach

Novocure, a global oncology company, confirmed that a mid-August 2026 cyberattack exposed data belonging to more than 1,400 U.S. cancer patients and an undisclosed number of employees. Affected patients may have legal options.

Novocure

Date of Breach: Mid-August 2026

Who was affected:

Clients of Novocure

Impacted Data:

Names, phone numbers, medical information (for a small subset of patients); patient ID numbers (for a broader group, without names)

Experienced a BREACH?

Novocure, a global oncology company known for developing Tumor Treating Fields (TTFields) therapy for cancer patients, has confirmed that a cyberattack exposed sensitive information belonging to more than 1,400 U.S. patients as well as an undisclosed number of employees.

Companies that handle sensitive medical information about cancer patients undergoing treatment have a heightened responsibility to protect that data, given how personal and consequential a medical diagnosis and treatment history can be if exposed.

Novocure’s Data Breach Investigation

According to reporting by BleepingComputer, Novocure disclosed that a mid-August 2026 cyberattack led to unauthorized access of company systems. A cybercriminal group subsequently published a large archive of files reportedly taken from Novocure during the incident. Following an investigation, Novocure determined that attackers accessed more than 1,400 U.S. patient records containing identification numbers, though the company stated those particular records did not include patient names or other directly identifying information. Separately, for a smaller group of fewer than 50 patients located in the western United States, the attackers accessed identifying information along with general contact information for the patients’ healthcare providers. Novocure also reported that contact information belonging to company employees, including job titles and phone numbers, was exposed in the incident.

Healthcare and healthtech companies remain frequent targets for cyberattacks because of the volume and sensitivity of the patient data they store, including diagnosis and treatment information that can be highly valuable to criminals seeking to commit medical identity theft or extort a victim organization for payment. The fact that Novocure specializes in cancer treatment technology means that any exposed treatment-related information could be particularly sensitive for the patients involved, even absent direct identification in the larger dataset. Novocure has stated it takes its obligation to safeguard patient privacy and data security seriously and has notified affected individuals directly.

When Did This Breach Occur?

The cyberattack is reported to have occurred in mid-August 2026. Novocure notified affected patients and disclosed the incident afterward, following an internal investigation into the scope of the intrusion.

What Information Was Breached?

For more than 1,400 U.S. patients, the exposed records reportedly included identification numbers but not names or other directly identifying information. For a smaller group of fewer than 50 patients in the western United States, exposed information reportedly included names, phone numbers, and medical information, along with general contact information for their healthcare providers. Contact information for Novocure employees, including job titles and phone numbers, was also reportedly exposed.

What You Can Do

If you are a current or former patient of Novocure or received a notification letter about this incident, consider taking the following steps:

Monitor your financial accounts and credit reports for unauthorized activity
Consider placing a fraud alert or credit freeze with the major credit bureaus
Be alert to phishing emails or calls referencing this incident or your medical treatment
Change passwords on any Novocure-affiliated patient portal accounts and enable two-factor authentication where available
Keep any official notice you receive about this incident for your records

File a Data Breach Lawsuit Against Novocure

If your personal or medical information was exposed as a result of the Novocure data breach, you may have legal options available to you.

Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.

Were you recently affected by a data breach?

Other Data Breaches

eAssist Dental Solutions

Date of Breach: Not yet publicly confirmed (dark web claim posted September 2026)

Strategic Wealth Advisors

Date of Breach: Reported to the Vermont Attorney General's Office on September 8, 2026

Rebound Orthopedics & Neurosurgery

Date of Breach: Not yet publicly confirmed (dark web claim posted September 2026)

Frequently Asked Questions

What Should I Do If I Believe My Data Has Been Breached?

A data breach occurs when sensitive, confidential, or protected information is accessed, stolen, or disclosed without authorization. Data breaches often occur through phishing emails, malware, weak passwords, insider threats, or unsecured databases. Indicators of a data breach can include unexpected password resets, suspicious account activity, unauthorized transactions, or notifications from companies about compromised information.If you suspect your data has been compromised, you must take measures and act quickly. Change passwords, enable two-factor authentication, review your financial accounts for unusual activity and consider freezing your credit.

What Happens to Your Data in a Data Breach?

Once stolen, your personal information may be sold on the dark web or used for identity theft and financial fraud. In some cases, hackers use the data to extort companies or launch further attacks. Victims often face long-term risks, including damage to credit and privacy.

How Should I Respond to a Data Breach Notification?

If you receive a data breach notification, don’t ignore it. Immediately change passwords for the affected account and any others that share credentials. Enroll in any free credit monitoring services offered and monitor financial statements closely.

What Evidence is Needed for a Data Breach Claim?

To pursue a data breach claim, you’ll need documentation showing your information was compromised and proof of resulting harm, such as fraudulent charges, credit score damage, or identity theft reports. Notification letters, financial records, and communication with the breached company can help support your claim.

Can a Company Be Sued for a Data Breach?

Yes. If a company fails to protect consumer data or delays notifying victims, it may be held liable under state and federal privacy laws. Many victims join class action lawsuits to recover financial losses and hold negligent organizations accountable.

What is the Average Settlement in a Data Breach Lawsuit?

Data breach settlements vary widely depending on the size of the breach, type of data compromised, and damages suffered by victims. Payouts may include cash compensation, identity theft protection, or reimbursement for losses. Many settlements range from a few hundred to several thousand dollars per person. A skilled data breach lawyer can guide victims through the complex legal process, ensuring their rights are protected. If you’ve received a data breach notification or believe your personal data was exposed, you may be eligible for compensation. Contact Class Action U to learn more about how to join a data breach lawsuit and understand the process of filing.