Novo Nordisk confirmed unauthorized actors exfiltrated clinical trial records and healthcare professional (HCP) contact information including names, registration numbers, phone numbers, and WhatsApp details from internal IT systems. Patient data was pseudonymized prior to exfiltration. The breach vector and full exfiltration scope remain undisclosed; investigation is ongoing. For organizations that share HCP or clinical trial data with Novo Nordisk through joint programs, there is an active downstream social engineering and phishing risk targeting medical staff using the exfiltrated WhatsApp and phone data.