Novo Nordisk's $25M Ransom Demand Collides with a Record Pill Launch and a Deep Pipeline

Hackers stole 1.3TB of data from Novo Nordisk; oral Wegovy hits record US sales, but stock drops 42% amid Eli Lilly competition and pipeline catalysts loom.

The hackers call themselves FulcrumSec, and they are sitting on 1.3 terabytes of Novo Nordisk's internal crown jewels. Source codes for blockbuster drugs, clinical trial data, the secretive AI project dubbed "Dragonfly," personal records of 163,000 employees, and pseudonymised profiles of 11,500 study patients — all of it was lifted. The ransom demand: $25 million. Novo Nordisk has refused to pay. Now the group threatens to auction off 700,000 individual files to private buyers.

The timing could hardly be more dramatic. At the same time the cybersecurity crisis unfolded, the Danish pharma giant was rolling out the most successful GLP-1 product launch in US history. The oral version of Wegovy hit the market on January 5, 2026, and by mid-April weekly prescriptions had already surpassed 200,000. Total scripts since launch: more than two million. That is not merely a strong start — it is the strongest GLP-1 volume début the US has ever seen.

Yet the stock tells a different story. Novo Nordisk shares closed on Tuesday at €37.59, leaving them roughly 42% lower year to date and more than 40% below the 52-week high. The equity trades about 7% beneath its 200-day moving average of €41.29. Investors have good reason for caution: Eli Lilly now controls 60.1% of the combined US GLP-1 market for obesity and diabetes, while Novo’s share has slipped to 39.4%, and the gap is widening. US pricing pressure, the Most-Favoured-Nations policy, and the looming patent expiry for semaglutide in several international markets have prompted Novo to issue a distinctly downbeat 2026 outlook — one that forecasts falling sales even as Lilly continues to grow at double-digit rates.

The pill, however, is changing the calculus. Crucially, Oral Wegovy is not simply cannibalising the injectable franchise. Up to a quarter of US adults suffer from a fear of needles, and many others never had access to GLP-1 injections at all. The oral form opens an entirely new patient pool. International launches are scheduled for the second half of 2026, beginning with a much-anticipated entry into China. Mike Doustdar, Novo’s CEO, recently announced in Beijing that Chinese approval for the oral pill is imminent. Novo’s data protection for semaglutide in China runs until early 2027, giving it a short but meaningful window to build market share there. In Europe, the UK’s Medicines and Healthcare products Regulatory Agency granted approval for the pill on Tuesday, adding another growth lever.

Beyond the immediate pill story, the pipeline holds two catalysts that the market seems to be ignoring. CagriSema — a fixed-dose combination of cagrilintide and semaglutide — has already been filed with the FDA. A decision is expected around the end of 2026, with a potential launch either late this year or in early 2027. The REDEFINE-1 study showed an average weight loss of 23% among patients who completed the trial, and 91.9% achieved at least 5% weight reduction compared with 31.5% on placebo. Critics point out that the drug lagged behind Lilly’s Zepbound in head-to-head comparisons. That is a legitimate concern, but a drug delivering 23% mean weight loss is hardly a commercial failure. Doustdar has told analysts he believes CagriSema outperforms everything currently on the market.

Further out lies Amycretin, a single molecule that simultaneously targets GLP-1 and amylin receptors. Early obesity data showed up to 22% weight loss over 36 weeks; a type 2 diabetes study recorded up to 14.5% weight reduction with no observable plateau. Novo’s chief scientific officer has emphasised that because Amycretin is a single molecule, manufacturing is simpler and more scalable than the combination therapy CagriSema. If phase 3 results confirm the early promise, Amycretin could eventually supersede both Wegovy and CagriSema.

The operational side of the business is also receiving massive investment. Novo has committed $6.5 billion to US production facilities, running them around the clock. The FDA recently declared that supply shortages for Wegovy and Ozempic have officially ended. That manufacturing muscle will be vital as the pill rollout accelerates.

Against this backdrop, the stock’s market capitalisation of roughly €170 billion implies a scenario in which CagriSema disappoints, Amycretin stalls, and Lilly captures every new patient. That is a heroically pessimistic assumption for a company that owns the only approved oral GLP-1 pill for obesity and has two next-generation molecules in late-stage development.

A gradual re-rating appears plausible as the FDA decision on CagriSema draws closer and the international pill launches gather pace. What remains unknown is how the cybersecurity breach will play out. If FulcrumSec follows through on its threat to sell the stolen data, the reputational and regulatory fallout — including potential GDPR fines of up to 4% of annual turnover — could become a significant overhang. For now, the market is weighing operational momentum against IT risk, and the balance may shift as each new pipeline event unfolds.