Novo Nordisk is living through a week of stark contrasts. The Danish pharmaceutical giant has fended off a double ransomware attack and won a legal battle in South Africa against counterfeit semaglutide products, all while the stock continues to climb from its March lows. Investors, for now, are focusing on the positives — but the damage from the data breach could take months to quantify.
A Legal Shield in South Africa
The strongest tailwind came from a ruling by the Gauteng High Court on June 22. The court issued a permanent injunction against iDexis, barring the company from manufacturing, distributing or marketing any unauthorized semaglutide-based products. Crucially, the judge rejected iDexis’s argument that pharmaceutical compounding exemptions apply to chemically similar substances. The exemption, the court held, only covers identical active pharmaceutical ingredients. The order remains in force until South Africa’s drug regulator, SAHPRA, completes its own investigation.
The decision blocks a potential flood of unapproved weight-loss copies in a key emerging market and reinforces Novo Nordisk’s patent position as the obesity drug race intensifies.
Pipeline Momentum and Broader Access
On the R&D front, Novo Nordisk released positive phase 3 data for CagriSema — a combination therapy of cagrilintide and semaglutide — showing significant reductions in blood sugar and body weight. The results strengthen the company’s competitive stance against Eli Lilly.
Additional data presented at the European Congress on Obesity highlighted that early responders to high-dose Wegovy achieved an average 27.7% weight reduction, compared with 15.4% for other patient groups. The UK’s Medicines and Healthcare products Regulatory Agency already approved the oral Wegovy pill in early June, and market watchers expect a formal submission for the oral formulation in China within the coming months.
Access is also improving in the United States. CVS Health expanded its GLP-1 support programs, capping monthly out-of-pocket costs for Medicare patients at $50 and offering virtual weight-management consultations for $49. That better positions Wegovy to reach a broader patient population.
The Cyber Siege: Two Ransom Demands, Stolen Data
But the headlines also carry a darker story. Two separate hacker groups targeted Novo Nordisk’s IT systems. One group, FulcrumSec, demanded $25 million, claiming to have stolen 1.3 terabytes of data via a compromised GitHub access token. A second group, TheUSERS007, demanded $50 million. Novo Nordisk rejected both ransom demands.
The stolen data includes pseudonymized information from clinical trial participants — patient IDs, biomarkers, and lifestyle data — as well as the full names, phone numbers, email addresses, WhatsApp contacts, and office addresses of healthcare professionals. The company says the clinical data cannot be traced back to individuals without access to additional systems, and that core operations were unaffected. Nonetheless, it took the affected systems offline as a precaution.
Should investors sell immediately? Or is it worth buying Novo Nordisk?
According to a separate report, the overall data breach involved approximately 1.1 terabytes of corporate data. The financial fallout remains unclear, but the incident is almost certain to trigger regulatory investigations, potential fines, and significant spending on cybersecurity upgrades.
Buybacks and Institutional Moves
Amid the noise, Novo Nordisk continued its aggressive share repurchase program. Between June 15 and 19, it bought back roughly 1.075 million B-shares for about 308 million Danish kroner. Since the program launched in February 2026, the company has acquired more than 20.9 million shares at an average price of 266.09 DKK. The broader buyback framework authorizes up to 15 billion kroner in total purchases.
Institutional activity was mixed in the first quarter. Dodge & Cox expanded its stake by 19.3 million shares, while Susquehanna added 9.9 million. FMR LLC, however, cut its position by 8.7 million shares.
Stock Recovery — With Caveats
After touching a 52-week low of €30.25 in March, the stock has recovered around 34% to close at €40.06 on Monday, before adding another 1.6% to hit €40.70 on Tuesday. That lifted its weekly gain above 8%.
Technically, the shares now trade roughly 7.8% above their 50-day moving average, a sign of improving momentum. Yet the stock still sits about 10% below its start-of-year level and around 34% below the 52-week high of €61.20.
Berenberg has reaffirmed its buy rating and raised its price target to 325 DKK, citing the pipeline and legal victories. But the bank also acknowledges headwinds: Novo Nordisk expects revenue and profit to decline by 4% to 12% in the 2026 fiscal year, and the lingering effects of the data leak may weigh on institutional confidence when the next quarterly report lands.
For now, the market is betting that the positive catalysts — legal protection, pipeline data, and access expansion — outweigh the cyber threat. But with two ransomware groups still holding stolen data and regulators circling, the balance could shift quickly.
Ad
Novo Nordisk Stock: Buy or Sell?! New Novo Nordisk Analysis from June 23 delivers the answer:
The latest Novo Nordisk figures speak for themselves: Urgent action needed for Novo Nordisk investors. Is it worth buying or should you sell? Find out what to do now in the current free analysis from June 23.
Novo Nordisk: Buy or sell? Read more here...
