STOCK TITAN

NovoCure cyber breach hits 1,400+ patient records

NovoCure Ltd (NVCR) reported that in mid-August 2026 it detected unauthorized access to certain information systems at a subsidiary.

(Moderate)
(Neutral)
Form Type
8-K

Rhea-AI Filing Summary

NovoCure Ltd (NVCR) reported that in mid-August 2026 it detected unauthorized access to certain information systems at a subsidiary. NovoCure activated its cybersecurity response plan, implemented containment measures, began an internal investigation, and engaged independent cybersecurity forensic experts to review the exposed data.

The review to date found exposure of internal company patient ID numbers for over 1,400 U.S. patient records (without names or other identifying data), additional identifying patient data for fewer than 50 patients in the western U.S., and general contact information for healthcare providers and employees. NovoCure states there was no access to its medical treatment devices, operations were not compromised, and all systems remain fully functional. The company currently does not believe the cybersecurity incident will have a material impact or reasonably likely material impact on its financial condition or results of operations but continues to evaluate the situation and related notification obligations.

Positive

  • None.

Negative

  • None.

Filing Explained

The investigation remains ongoing, and NovoCure says it will file an amended Item 1.05 report within four business days after determining—or receiving information showing—that the incident has a material or reasonably likely material financial impact.

Item 1.05 Material Cybersecurity Incidents Business
A cybersecurity incident that the company has determined to be material to investors.
Item 8.01 Other Events Other
Voluntary disclosure of events the company deems important to shareholders but not covered by other items.
Item 9.01 Financial Statements and Exhibits Exhibits
Financial statements, pro forma financial information, or exhibit attachments filed with this report.
Date of report September 1, 2026 Date NovoCure Limited reported the cybersecurity incident
Patient records with internal IDs exposed over 1,400 U.S. patient records Internal company patient ID numbers only, no names or other identifying data
Patients with additional identifying information exposed fewer than 50 patients Patients in the western U.S. whose data included additional identifying information
Exhibit number Exhibit 104 Cover Page Interactive Data File embedded within the Inline XBRL document
cybersecurity response plan technical
"the Company activated its cybersecurity response plan, implemented containment"
cybersecurity forensic experts technical
"engaged independent cybersecurity forensic experts to assist with the investigation"
forward-looking statements regulatory
"this press release may contain forward-looking statements. Forward-looking statements"
Forward-looking statements are predictions or plans that companies share about what they expect to happen in the future, like estimating sales or profits. They matter because they help investors understand a company's outlook, but since they are based on guesses and assumptions, they can sometimes be wrong.
Private Securities Litigation Reform Act of 1995 regulatory
"The Private Securities Litigation Reform Act of 1995 permits this discussion."

FAQ

What cybersecurity incident did NovoCure Ltd (NVCR) disclose?

NovoCure disclosed that in mid-August 2026 it became aware of unauthorized access to some information systems at a subsidiary. The company activated its cybersecurity response plan, implemented containment measures, and is conducting an internal investigation with independent cybersecurity forensic experts.

What patient data was exposed in NovoCure (NVCR)’s cybersecurity incident?

The exposed data included internal patient ID numbers for over 1,400 U.S. patient records without names or other identifying data, and patient data for fewer than 50 other patients in the western U.S. that included additional identifying information, plus general contact information for providers and employees.

Did the NovoCure (NVCR) cybersecurity incident affect its medical devices or operations?

NovoCure states that no access was obtained to any medical treatment devices, its ability to operate has not been compromised, and all systems are fully functional following the cybersecurity incident.

Does NovoCure (NVCR) expect a material financial impact from the cybersecurity incident?

NovoCure currently states it does not believe the cybersecurity incident will have a material or reasonably likely material impact on its financial condition or results of operations, while it continues to ascertain additional information.

What future disclosures did NovoCure (NVCR) commit to regarding this cybersecurity incident?

NovoCure undertakes that if it later determines the cybersecurity incident will have a material impact or reasonably likely material impact on its financial condition or results of operations, it will file an amendment under Item 1.05 within four business days after determining such information.

AI-generated analysis. How Rhea-AI works. Not financial advice.

See more from StockTitan in Google Search and AI answers. Adds StockTitan as a preferred source · opens Google
Add on Google
Learn about SEC filing dates
0001645113false00016451132026-08-012026-09-30


UNITED STATES
SECURITIES AND EXCHANGE COMMISSION
Washington, D.C. 20549
FORM 8-K
CURRENT REPORT
Pursuant to Section 13 OR 15(d) of The Securities Exchange Act of 1934

September 1, 2026
Date of Report (date of earliest event reported)

NovoCure Limited
(Exact name of registrant as specified in its charter)
Jersey
001-37565
98-1057807
(State or other jurisdiction of incorporation or organization)
(Commission File Number)
(I.R.S. Employer Identification No.)
No. 4 The Forum, Grenville Street
St. Helier
Jersey
JE2 4UF
(Address of Principal Executive Offices)
(Zip Code)
+44 (0) 15 3475 6700
Registrant's telephone number, including area code

(Former name or former address, if changed since last report.)

Check the appropriate box below if the Form 8-K filing is intended to simultaneously satisfy the filing obligation of the registrant under any of the following provisions (see General Instruction A.2. below):

Written communications pursuant to Rule 425 under the Securities Act (17 CFR 230.425)

Soliciting material pursuant to Rule 14a-12 under the Exchange Act (17 CFR 240.14a-12)

Pre-commencement communications pursuant to Rule 14d-2(b) under the Exchange Act (17 CFR 240.14d-2(b))

Pre-commencement communications pursuant to Rule 13e-4(c) under the Exchange Act (17 CFR 240.13e-4(c))

Securities registered pursuant to Section 12(b) of the Act:
Title of each classTrading Symbol(s)Name of each exchange on which registered
Ordinary Shares, no par valueNVCRThe Nasdaq Stock Market LLC

Indicate by check mark whether the registrant is an emerging growth company as defined in Rule 405 of the Securities Act of 1933 (§230.405 of this chapter) or Rule 12b-2 of the Securities Exchange Act of 1934 (§240.12b-2 of this chapter).
Emerging growth company
If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act.
o




Item 8.01     Other Events.

In mid-August 2026, NovoCure Limited (the "Company," "we," or "us") through a subsidiary, became aware of unauthorized access to some of its information systems. Upon detecting the unauthorized access, the Company activated its cybersecurity response plan, implemented containment measures, and initiated an internal investigation of the event. The Company also engaged independent cybersecurity forensic experts to assist with the investigation, including reviewing the exposed data that was accessed. Based on the investigation to date, the Company determined that the exposed data included: internal Company patient ID numbers for over 1,400 U.S. patient records (these ID numbers are only used internally and no patient names or other identifying data for these was exposed); patient data for fewer than 50 other patients in the western U.S. that included additional identifying information; general contact information for healthcare providers we work with; and general contact information for Novocure employees, such as their job titles and phone numbers. No access to any of our medical treatment devices was obtained, our ability to operate has not been compromised and all of our systems are fully functional. The Company takes its obligation to safeguard privacy and security of its patients’ data very seriously. The Company continues to evaluate applicable regulatory and legal notification requirements and will make all required notifications based on its findings, including to impacted patients.

At this time, we do not believe that this cybersecurity incident will have a material impact or reasonably likely material impact on our financial condition and results of operations; however, at the time of this filing we are continuing to ascertain additional information regarding this incident. If additional information is obtained whereby we determine this cybersecurity incident will have a material impact or reasonably likely material impact on our financial condition and results of operations, we undertake to file an amendment to this Form 8-K filing under Item 1.05 containing such information within four business days after we, without unreasonable delay, determine such information, or within four business days after such information becomes available.

Forward-Looking Statements
In addition to historical facts or statements of current condition, this press release may contain forward-looking statements. Forward-looking statements provide Novocure’s current expectations or forecasts of future events. These may include statements regarding anticipated scientific progress on its research programs, clinical study progress, development of potential products, interpretation of clinical results, prospects for regulatory approval, manufacturing development and capabilities, market prospects for its products, coverage, collections from third-party payers and other statements regarding matters that are not historical facts. You may identify some of these forward-looking statements by the use of words in the statements such as “anticipate,” “estimate,” “expect,” “project,” “intend,” “plan,” “believe” or other words and terms of similar meaning. Novocure’s performance and financial results could differ materially from those reflected in these forward-looking statements due to general financial, economic, environmental, regulatory and political conditions and other more specific risks and uncertainties facing Novocure such as those set forth in its Annual Report on Form 10-K filed on February 26, 2026, and subsequent flings with the U.S. Securities and Exchange Commission. Given these risks and uncertainties, any or all of these forward-looking statements may prove to be incorrect. Therefore, you should not rely on any such factors or forward-looking statements. Furthermore, Novocure does not intend to update publicly any forward-looking statement, except as required by law. Any forward-looking statements herein speak only as of the date hereof. The Private Securities Litigation Reform Act of 1995 permits this discussion.

Item 9.01    Financial Statements and Exhibits.

(d)    Exhibits

Exhibit No.Description
104Cover Page Interactive Data File (embedded within the Inline XBRL document)




SIGNATURES

Pursuant to the requirements of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned hereunto duly authorized.

NovoCure Limited
(Registrant)

Date: September 1, 2026


By: /s/ Christoph Brackmann  
Name: Christoph Brackmann
Title: Chief Financial Officer

Filing Exhibits & Attachments

3 documents