The exposed information varies by individual but may include names, contact details, dates of birth, and clinical or treatment-related data. For employees, the compromised records could involve payroll or benefits information. Novocure stated that the attackers accessed the systems during a limited window, and the company has since taken steps to contain the incident.

• Affected patient population: more than 1,400 U.S. patients
• Breach timeframe: mid-August
• Data types potentially exposed: names, contact information, clinical data (patients); financial/HR data (employees)

Novocure has begun notifying affected individuals and regulators, though it has not yet disclosed the exact attack vector or whether ransomware was involved. The company is offering credit monitoring and identity protection services to those impacted. No evidence of data misuse has been reported so far, but Novocure advises affected patients to remain vigilant against phishing or fraud attempts.

Source: Unknown

Is your organization prepared to handle a breach that exposes both patient and employee data, and what specific steps are you taking to secure clinical information in particular?