Consume Product

They are also mocking Novo Nordisk, claiming the company was using passwords like "novo123" for critical systems and that its security team sucks.

The breach includes source code, proprietary information on both marketed and pipeline drugs, clinical trial records, data on employees, doctors, and patients, and manufacturing details. The threat actor also claims it obtained private internal AI models from Novo's systems.

They allegedly breached Novo in March via a GitHub access token that let it clone the company's repositories and find additional credentials. The intrusion ran for over two months and yielded roughly 1.3 terabytes across more than 700,000 files.