Novo Nordisk Confirms Data Theft: What Attackers Took and What They Didn’t

2026-06-15T14:51:43Z98916635ad4068a9e3f19dfbf67fe6eb04fe4cd08769f25a764ccd8a6f71367a
critical-infrastructuredata-breachgentlemen-ransomwarehandalaincident-responseinfostealerknown-exploited-vulnerabilitylaw-enforcementoracle-peoplesoftpan-osransomwaresupply-chainthreat-actorvpn-bypasswordpress

What happened

Multiple high-impact security incidents reported: Novo Nordisk confirmed a cyberattack and theft of internal and clinical-trial data; Palo Alto Networks warned of active exploitation of PAN-OS authentication-bypass (CVE-2026-0257) that allows VPN connections; a supply-chain compromise on Awesome Motive’s CDN delivered malicious JavaScript to WordPress plugins (OptinMonster, TrustPulse, PushEngage); the Gentlemen ransomware operation scaled rapidly using infostealers, AI, and an affiliate model (483 victims listed); CISA added Oracle PeopleSoft/PeopleTools vulnerability CVE-2026-35273 (CVSS 9.8

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
securityaffairs
Record identifier
98916635ad4068a9e3f19dfbf67fe6eb04fe4cd08769f25a764ccd8a6f71367a
Enrichment time
2026-06-15T14:51:43Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · Novo Nordisk Confirms Data Theft: What Attackers Took and What They Didn’t · Baitaphish