Cross-Sector entity
Of the tracked stories, 7 of 9 also mention Novo Nordisk, the most common co-covered peer. The 12-day window averages about 5.3 stories each week. The busiest single day carried 4. health-it accounts for 2 of the 9 tracked stories, while 5 other categories carry the remainder.
9 verified stories tracked
Last mentioned: Jun 28, 2026
Entity pulse
Coverage balance Negative coverage leads. Negative coverage exceeds positive coverage by 100 percentage points.
Figures are computed live from our source-verified story record — see our methodology for how impact and sentiment are derived.
Of the tracked stories, 7 of 9 also mention Novo Nordisk, the most common co-covered peer. The 12-day window averages about 5.3 stories each week. The busiest single day carried 4. health-it accounts for 2 of the 9 tracked stories, while 5 other categories carry the remainder. We currently track 9 Cross-Sector stories that mention FulcrumSec, published between June 17, 2026 and June 28, 2026. Negative sentiment appears in 100% of the tracked stories. Each carries 2.3 original sources on average.
Computed from the 9 stories linked to this entity. Beat comparisons are omitted because no baseline was available for this window.
Coverage cohort
Other entities that clear the same relevance threshold in stories also covering FulcrumSec. Shared-story counts are live from our verified record — not editorial picks.
FulcrumSec Goes Public
FulcrumSec posts a lengthy message on its website detailing the breach, the $25 million extortion demand, and the decision to explore private data sales after payment refusal.
ShinyHunters announces additional victims
On June 16, the group reveals new targets including Glendale Community College, Moody Bible Institute, Illinois Central College, and Houston City College.
Company Discloses Breach
Novo Nordisk publicly announces a cybersecurity incident involving unauthorized access to a limited number of internal IT systems and some personal data.
Public incident disclosure
Novo Nordisk announces a cybersecurity incident involving unauthorized access to a limited number of internal IT systems and access to certain personal data.
Novo Nordisk Responds
Roughly 48 hours after initial outreach, Novo Nordisk uses a Proton Mail address to verify the legitimacy of the claim by requesting specific file contents.
Initial Extortion Contact
FulcrumSec contacts unnamed Novo Nordisk executives demanding $25 million; the exact method is not publicly detailed.
FulcrumSec ransomware attack on Global Schools Foundation
The group exfiltrates data and disrupts operations across GSF's international network of schools in early June, causing widespread service outages.
Extortion demand sent
The group contacts unnamed Novo Nordisk executives and demands $25 million, initiating the extortion phase.
Suspected initial intrusion
FulcrumSec likely gains initial access to Novo Nordisk's networks, beginning a period of over two months of undetected data exfiltration.
ShinyHunters breaches Infinite Campus via Salesforce
Cybercriminals exploit a vulnerability to steal personal information from 137,000 school staff accounts, affecting the widely used K-12 student information system.
FulcrumSec Emerges
The cyber extortion group FulcrumSec first appears, later becoming known for credible claims and sophisticated intrusions.
A cyberattack on Novo Nordisk has potentially exposed over a terabyte of sensitive health information, including patient, doctor, and clinical trial data, after a $25 million extortion demand was refused. The incident highlights critical vulnerabilities in protecting personal health data within the pharmaceutical industry.
Cyber extortion group FulcrumSec executed a sophisticated, two-month-long network intrusion at Novo Nordisk, exfiltrating 1TB of sensitive data and demanding $25 million. The group's tactics and the refusal to pay offer a detailed case study for threat intelligence and incident response teams.
Biotech giant Novo Nordisk faces a catastrophic IP theft as hackers claim to have stolen over a terabyte of proprietary drug data, including formulas and trial results, and are now exploring private sales after a $25 million ransom was refused.
Source: yahoo.com · thestar.com.my
Two major threat actor groups are driving a crisis in education technology, with ShinyHunters stealing 137,000 staff records via Infinite Campus and FulcrumSec paralyzing Global Schools Foundation. The incidents reveal a shift in cybercriminal focus toward low-defence, high-value academic data repositories.
The education technology sector is under siege after ShinyHunters breached Infinite Campus, exposing 137,000 staff accounts and potentially impacting 11 million students. New attacks on colleges and international schools signal a systemic vulnerability that demands immediate action from district leaders and vendors.
Source: Pierluigi Paganini
A cyber extortion group claims to have stolen over a terabyte of data from pharmaceutical giant Novo Nordisk, including clinical trial data of 11,500 patients. While some sensitive data is being withheld, the breach highlights critical vulnerabilities in healthcare data security and could trigger regulatory scrutiny under GDPR and other frameworks.
Cybersecurity experts assess FulcrumSec as a serious threat actor, and its two-month dwell time inside Novo Nordisk before making a $25 million extortion demand reflects advanced persistent threat tactics. The breach highlights growing risks to critical infrastructure and the evolution of cyber extortion with a harm-reduction narrative.
FulcrumSec's breach of Novo Nordisk could jeopardize years of R&D as stolen data includes proprietary information on released and unreleased drugs, trial data, and manufacturing processes. With the extortion failure and potential data sale, rival pharma firms may gain competitive intelligence, threatening Novo's market position.
The FulcrumSec breach exposed Novo Nordisk’s internal AI model information alongside drug data, potentially compromising years of machine learning work used in drug discovery. The theft of proprietary AI assets highlights escalating cyber risks for AI-driven pharma innovation.
Source: Straitstimes · Times of News (in)
