DisclosureLens
GLOBALtranslated → enUnknownRansomwareShinyhuntersLow

NovoCure Limited

bd_1f4c992ee890e009 · schema v1 · pii pii-v2

Severity

Low

Discovered

Filed

Aug 15, 2026

To disclose

Affected

Not disclosed

Linked

3 filings

Confidence

60%
Full breach record for NovoCure Limited

Press / market disclosure — not a breach-notification filing

A media or market posting that confirms an incident but carries no breach-notification fields, so compliance clocks aren't assessable. The summary below is extracted from the coverage and machine-translated to English — verify against the source.

Summary

machine-translated

The oncology company Novocure states that a cyberattack exposed patient records in the US. Novocure: The oncology company Novocure reported a cybersecurity incident that exposed the internal records of more than 1,400 US patients. Unauthorized access to information systems occurred in mid-August. Linked ransomware group: shinyhunters.

Incident timeline — mostly unverified

? — ?

Breach window unknown

Aug 15, 2026

Press report

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Attack → press

Compliance clock

Not assessable

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings

View merged incident ↗
PressAug 15 · first · this page

Pattern: first filing Aug 15, last Sep 1 — a 17-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market reportThis record

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source ceiling

  • incident type + narrative only (may be machine-translated)
  • discovery date
  • materiality
  • affected count
  • data types
  • compliance clock

The ✕ fields stay blank until a regulatory filing or victim disclosure lands.

About this groupFirst seen 2024-04-23

shinyhunters

According to ransomware.live, ShinyHunters is a financially motivated data-theft and extortion group active since 2020, responsible for high-profile breaches including Ticketmaster (via Snowflake) and PowerSchool; by 2025 they launched a RaaS offering called "shinysp1d3r," and in August 2025 French authorities arrested four members.

167 tracked hereFull profile →