NovoCure Limited
bd_1f4c992ee890e009 · schema v1 · pii pii-v2
Full breach record for NovoCure Limited →Press / market disclosure — not a breach-notification filing
A media or market posting that confirms an incident but carries no breach-notification fields, so compliance clocks aren't assessable. The summary below is extracted from the coverage and machine-translated to English — verify against the source.
Summary
machine-translatedThe oncology company Novocure states that a cyberattack exposed patient records in the US. Novocure: The oncology company Novocure reported a cybersecurity incident that exposed the internal records of more than 1,400 US patients. Unauthorized access to information systems occurred in mid-August. Linked ransomware group: shinyhunters.
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Aug 15, 2026
Press report
—
Corroborated · see linked filings
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Attack → press
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Ransomware claims (1)
- Leak Siteshinyhuntersbd_bdc9447f70280f082026-08-22 · +7dCandidate
Regulatory filings (1) · sorted by filing gap
- SEC 8-Kbd_05f89a4cca66d80e2026-09-01 · +17dVerified
Filing propagation · 2 filings
View merged incident ↗Pattern: first filing Aug 15, last Sep 1 — a 17-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- incident type + narrative only (may be machine-translated)
- discovery date
- materiality
- affected count
- data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
shinyhunters
According to ransomware.live, ShinyHunters is a financially motivated data-theft and extortion group active since 2020, responsible for high-profile breaches including Ticketmaster (via Snowflake) and PowerSchool; by 2025 they launched a RaaS offering called "shinysp1d3r," and in August 2025 French authorities arrested four members.