Loading story…
National Cancer Centre Singapore (NCCS) allegedly exposed the email addresses, identities, and in some cases workplaces of people connected to hereditary breast and ovarian cancer syndrome (HBOC) after sending a “Living with HBOC” event invitation with recipients in the CC field rather than BCC. A recipient estimated that more than 500 addresses were visible to everyone who received the message.
The disclosure could reveal recipients’ sensitive health status or genetic cancer risk, and potentially expose information about relatives and offspring because HBOC is hereditary. NCCS had not publicly confirmed the incident, disclosed the number of affected individuals, or detailed remediation actions at the time of reporting.
See attribution, scope, and your downstream exposure.
1 event from the most recent confirmed update back to the earliest known activity.
National Cancer Centre Singapore sent a “Living with HBOC” event invitation using the CC field rather than BCC, making recipients’ email addresses visible to other recipients. The exposure allegedly revealed identities, contact details, and in some cases workplaces of people associated with hereditary breast and ovarian cancer syndrome; one recipient estimated that more than 500 addresses were visible.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
2 references tracked. Mallory keeps watching after this page renders.
malware.news
Open sourcedatabreaches.net
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Novocure disclosed that unauthorized actors accessed certain company information systems in mid-August, exposing data associated with more than 1,400 U.S. cancer patients. The accessed records contained patient ID numbers but reportedly did not include names or other identifying information; attackers also obtained identifying information for fewer than 50 patients in the western United States and general contact details for healthcare providers. The incident also exposed contact information, job titles, and phone numbers for an undisclosed number of employees. Novocure said its medical treatment devices were not accessed, operations were not disrupted, and systems remain functional as the company assesses notification obligations.
Sep 4, 2026
The University of Hawaiʻi confirmed that a **ransomware attack** against the UH Cancer Center’s **Epidemiology Division** led to the theft of sensitive data affecting up to **~1.2 million individuals**. The intrusion occurred in **August 2025**, and the university began issuing notifications in late February, including letters to **87,493** participants in the *Multiethnic Cohort (MEC) Study* and additional outreach tied to roughly **900,000** discovered email addresses. UH stated the incident did **not** impact Cancer Center clinical trials operations, patient care, other Cancer Center divisions, or UH student records. Disclosed exposed data includes research and registry-related files containing **names and Social Security numbers**, and in some cases **driver’s license numbers** and **health information** associated with the MEC Study (1993–1996) and other diet/cancer studies, as well as historical datasets sourced from state transportation and voter registration records (late 1990s/2000s). Reporting also indicates the affected records include SSN identifiers from historical driver’s license and voter registration data, expanding the potential impacted population beyond the MEC cohort to approximately **1.15 million** additional individuals whose information may have been present in those datasets.
Jun 29, 2026
Novo Nordisk disclosed a cyberattack in which attackers accessed a limited number of internal IT systems and copied non-public data tied to some clinical trial participants and healthcare professionals. The stolen clinical trial information included pseudonymized patient identifiers rather than direct identifiers such as names, but it still covered sensitive fields including trial participation details, sex or gender, year of birth, biomarkers, health or immunogenicity data, and lifestyle factors such as smoking status, alcohol use, and BMI. The company said healthcare professional contact and registration details were also exposed, raising the risk of targeted phishing and impersonation attempts over email, phone, and WhatsApp. Novo Nordisk took affected internal systems offline as a precaution, brought in external cybersecurity experts to investigate, and said core business operations were not impacted, while the total number of affected individuals and the full scope of the breach remain under investigation.
Jul 12, 2026