NovoCure Ltd Reports Cybersecurity Incident Affecting Patient Data

What Happened
NovoCure Ltd (NVCR) filed an 8‑K on September 1, 2026 (Items 1.05 and 8.01) reporting that in mid‑August 2026 a subsidiary detected unauthorized access to some of its information systems. The company activated its cybersecurity response plan, engaged independent forensic experts, implemented containment measures, and began an internal investigation.

Key Details

• The exposed data included internal patient ID numbers for over 1,400 U.S. patient records (ID numbers only; no patient names for these records).
• Patient data for fewer than 50 other patients in the western U.S. contained additional identifying information.
• General contact information for healthcare providers and for Novocure employees (job titles and phone numbers) was also accessed.
• No access to medical treatment devices was obtained, operations were not compromised, and systems are fully functional; the company does not currently believe the incident will have a material effect on financial condition or results but is still investigating.

Why It Matters
For investors, this filing signals a cybersecurity breach that involves patient and employee contact data but — based on the company’s current findings — does not appear to affect clinical devices or business operations and is not expected to be material to financial results at this time. NovoCure is evaluating regulatory and legal notification obligations and will notify impacted parties and amend the 8‑K if it later determines there will be a material impact. Continued updates about the investigation, regulatory notifications, or unexpected costs could be relevant to the company’s risk profile.