[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6NBhs2Qzfo0feIjHaN5dNTCuPhjNxk3o2cIaDocw6q4":3},{"article":4,"iocs":50,"watch_terms":51,"solutions":52,"lesson":142},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"63a0d160-f78f-423a-8d9a-99433269dcc0","Novocure data breach affects more than 1,400 cancer patients","novocure-data-breach-affects-more-than-1-400-cancer-patients-e50e48","Healthtech company Novocure says the data of an undisclosed number of employees and more than 1,400 U.S. cancer patients has been exposed in a mid-August cyberattack. [...]","Healthtech company Novocure has disclosed a cyberattack that exposed the data of over 1,400 U.S. cancer patients and an undisclosed number of employees. The incident, discovered in mid-August, involved unauthorized access to information systems, leading to the exposure of patient ID numbers and, for a smaller subset, identifying and contact information for healthcare providers. Employee contact details were also compromised.","Novocure data breach exposes records of over 1,400 cancer patients and employees.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fnovocure-data-breach-affects-more-than-1-400-cancer-patients\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F09\u002F01\u002FNovocure-headpic.jpg","2026-09-01T14:28:40+00:00","2026-09-01T16:00:24.068762+00:00",7,[17,20,23,26,28,30],{"name":18,"type":19},"Novocure","vendor",{"name":21,"type":22},"ShinyHunters","threat_actor",{"name":24,"type":25},"Tumor Treating Fields","product",{"name":27,"type":19},"McKesson",{"name":29,"type":19},"Nutex",{"name":31,"type":19},"CareCloud","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":32,"icon":34,"name":35,"slug":36},null,"Breaches","breaches",[38,40,45],{"category":39},{"id":32,"icon":34,"name":35,"slug":36},{"category":41},{"id":42,"icon":34,"name":43,"slug":44},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,27,29],{"controls":53,"vendors":141},[54,83,112],{"slug":55,"name":56,"problem":57,"products":58},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[59,67,75],{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-itdr","Huntress Managed ITDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-itdr","Managed detection of suspicious activity in Microsoft 365 and Entra ID.",{"slug":84,"name":85,"problem":86,"products":87},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",[88,96,104],{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"guardsix","Guardsix","\u002Fvendor-logos\u002Fguardsix.png","guardsix-siem","Guardsix SIEM","https:\u002F\u002Fguardsix.com\u002Fproduct\u002Fsiem","SIEM with automation, developed and hosted in Europe.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"vega","Vega","\u002Fvendor-logos\u002Fvega.png","vega-agentic-detection","Agentic Detection","https:\u002F\u002Fvega.io\u002Fplatform\u002Fagentic-detection","Detection rules that run across security data in the stores where it already lives, so logs do not have to be moved into a central SIEM first.",{"slug":113,"name":114,"problem":115,"products":116},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[117,125,133],{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","incident-response","CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","unit-42-retainer","Unit 42 Retainer","https:\u002F\u002Fwww.paloaltonetworks.com\u002Funit42\u002Fretainer","Incident response retainer with Unit 42, including preparation services.",{"vendor_slug":134,"vendor_name":135,"vendor_logo":136,"product_slug":137,"product_name":138,"url":139,"description":140},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","mandiant-incident-response","Mandiant Incident Response","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fconsulting\u002Fmandiant-incident-response-services","Incident response services from Mandiant, available on retainer.",[],{"slug":143,"title":144,"body":145,"framework_refs":146,"framework_notes":159},"novocure-breach-exposes-1400-cancer-patients-data-via-unauthorized-system-access","Novocure Breach Exposes 1,400+ Cancer Patients' Data via Unauthorized System Access","Novocure suffered a cyberattack resulting in unauthorized access to systems containing sensitive health and contact information for over 1,400 cancer patients and an undisclosed number of employees. The breach highlights the critical risk of inadequate access controls and insufficient monitoring in healthcare environments where patient data is highly sensitive and heavily regulated. Delayed discovery — with the incident found in mid-August but likely occurring earlier — suggests gaps in real-time detection and logging capabilities. Healthcare organizations handling Protected Health Information (PHI) face severe consequences under HIPAA when access controls and monitoring fail to prevent or promptly detect intrusions.",[147,148,149,150,151,152,153,154,155,156,157,158],"NIST SP 800-53 AC-2 (Account Management)","NIST SP 800-53 AC-6 (Least Privilege)","NIST SP 800-53 AU-6 (Audit Review, Analysis, and Reporting)","NIST SP 800-53 IR-4 (Incident Handling)","CIS Control 5 (Account Management)","CIS Control 6 (Access Control Management)","CIS Control 8 (Audit Log Management)","HIPAA Security Rule §164.312(a)(1) (Access Control)","HIPAA Security Rule §164.312(b) (Audit Controls)","HIPAA Breach Notification Rule §164.400–414","NIST CSF DE.CM-3 (Personnel Activity Monitoring)","NIST CSF PR.AC-4 (Access Permissions and Authorizations)",{}]