Novo Nordisk Sued
Pharmaceutical giant Novo Nordisk faces negligence class action over data hack tied to extortionist group
Novo Nordisk, a pharmaceutical giant, has been sued in a New Jersey federal court over a data breach that exposed sensitive personal health information of patients and employees. The proposed negligence class action, filed on June 18, 2026, alleges that the company failed to have adequate data security measures in place to protect against a cybercriminal extortionist group. According to reports, the data breach is one of the many incidents that have been documented by the Privacy Rights Clearinghouse, which has compiled a chronology of over 75,000 reported breaches since 2005.
The lawsuit claims that Novo Nordisk's negligence led to the exposure of personal data, which could result in financial loss, loss of reputation, and profiling. This is a concern that has been recognized by lawmakers, who have introduced legislation such as the Digital Personal Data Protection Bill, 2023, to regulate the processing of personal data. The bill acknowledges that the processing of personal data can have adverse implications for individuals and seeks to provide a framework for the protection of personal data.
Gina Kim, reporting for Law360, noted that the lawsuit against Novo Nordisk is a significant development in the ongoing efforts to hold companies accountable for data breaches. The case highlights the need for companies to prioritize data security and protect sensitive personal information. As the lawsuit makes its way through the courts, it is likely to have implications for companies across various industries, particularly those that handle sensitive personal health information.
The data breach chronology maintained by the Privacy Rights Clearinghouse shows that hundreds of millions of people have been affected by data breaches in the United States. The chronology is based on publicly available notifications from government sources and provides a comprehensive record of data breaches since 2005. The Novo Nordisk lawsuit is a reminder that companies have a responsibility to protect personal data and that failure to do so can have serious consequences. The outcome of the lawsuit will be closely watched by companies and lawmakers alike, as it has the potential to shape the landscape of data protection and privacy regulations.
Cross-reference independently — do not take our word for it.
Disclosure: NewsAnarchist uses AI-assisted reporting with web search. Always verify primary sources linked above.
This article is produced by NewsAnarchist's AI reporting system, not a human staff reporter. It's built from the primary source cited above (a declassified document, a FOIA release, an inspector general or congressional report, or a named whistleblower disclosure reported by outlets we cite) and reports what that source states, attributed to it — it reports what the document or disclosure states and does not speculate about what remains classified beyond that. Part of our Government Secrets hub. Found an error? Tell us.