Novocure data breach impacts 1,400 cancer patients and employees

Oncology company Novocure disclosed a data breach affecting over 1,400 U.S. cancer patients, with exposed records including ID numbers but not names for most. For fewer than 50 patients in the western U.S., identifying information and provider contact details were accessed. The company said its medical devices were not compromised and systems remain functional.

The breach at Novocure, a firm specializing in tumor-treating therapies, exposed records tied to more than 1,400 U.S. cancer patients. While most affected individuals had only identification numbers compromised, a smaller subset of fewer than 50 patients in the western U.S. faced exposure of personal identifying details and provider contact information. The company has emphasized that its medical devices were untouched and that its systems continue operating normally, suggesting the incident was limited to administrative or patient-record data rather than clinical infrastructure.

This incident highlights the particular sensitivity of healthcare-related breaches, where oncology patients may face heightened concerns about privacy on top of their medical challenges. The distinction between exposed ID numbers and full identifying information matters for assessing risk severity, as the latter could enable more targeted fraud or social engineering attempts. Novocure's reassurance that device functionality remains intact is notable, given the growing reliance on connected medical technology in cancer care.