Cybercriminals Demand $25 Million from Novo Nordisk

Company's Response

Novo Nordisk has not publicly commented on the incident in detail so far. There are also no official statements regarding possible effects on production or the supply of medications such as Ozempic. According to its own communications, the company has brought in IT security experts to investigate the incident.

The amount of the demanded sum of 25 million US dollars shows the professionalism of the attackers. Such amounts are typical for targeted attacks on large, financially strong companies. The industry has been warning for years of a growing threat from organized cybercriminals who are becoming increasingly sophisticated.

Pharmaceutical Industry as a Target of Cybercrime

Pharmaceutical companies are considered particularly attractive targets for cybercriminals because they possess valuable research data, patents, and personal patient data. A successful attack can not only cause financial damage, but also impair the supply of medications and damage public trust.

According to the IT security company FulcrumSec, which investigates comparable cases, attacks on the healthcare sector have risen sharply in recent years. Attackers frequently exploit software vulnerabilities, phishing emails, or compromised employee credentials to gain access to systems.

Outlook and Security Recommendations

Whether sensitive data was exfiltrated in the current incident is currently not known. The investigations are ongoing, and it remains to be seen whether the company will comply with the ransom demand. Security experts generally advise against paying ransoms, as this provides no guarantee of data restoration and can encourage further extortion.

The incident at Novo Nordisk is part of a growing number of cyberattacks on European companies. Authorities and security firms are observing the development with concern and are calling for increased investment in IT security, particularly in critical infrastructure such as healthcare.