Novogene Listed by coinbasecartel Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Novogene was listed by the coinbasecartel ransomware group on March 15, 2026. The listing states that internal files were exfiltrated during a ransomware attack, though the number of individuals affected and the precise contents of any data remain undisclosed. Incidents of this kind continue to occur across research and healthcare sectors that handle sensitive biological and personal information, underscoring ongoing challenges in protecting genomic datasets.

What happened

The incident came to public attention through a listing posted by coinbasecartel on March 15, 2026. The group claims responsibility for exfiltrating internal files from Novogene in a ransomware operation. No further details on the timing of the intrusion, the volume of data taken, or the method of access have been released. The number of people whose information may be involved is not known.

Inside coinbasecartel

The group claims to have targeted Novogene and placed the organisation on its leak site. Public reporting on coinbasecartel has documented its pattern of publishing victim names alongside assertions of data theft to pressure organisations into negotiations. No independent confirmation of the Novogene claim has been provided beyond the listing itself.

About Novogene

Novogene provides genomic sequencing and bioinformatics services. Founded in 2011, the company operates offices in China, the United States, the United Kingdom and Singapore. Its work supports scientific research, agricultural applications, pharmaceutical development and healthcare projects that rely on large-scale genetic data analysis.

Organisations in this sector routinely process both research datasets and identifiable information linked to study participants or patients. A breach therefore carries implications for privacy, regulatory compliance and the integrity of ongoing scientific work.

The information in question

The listing refers only to “internal files exfiltrated in ransomware attack.” No inventory of specific data categories has been published. Organisations of this type commonly hold genomic sequences, associated metadata, research records and administrative files, yet the exact scope of any exposure in this case remains unconfirmed.

What's at stake

Individuals whose genomic or health-related records may be involved face the possibility of long-term privacy exposure, because genetic data cannot be changed. Research institutions and commercial partners could encounter delays in projects or additional scrutiny from ethics and data-protection bodies. Novogene itself may incur costs related to investigation, notification and remediation, though the scale of these effects is not yet documented.

Were you affected?

Because the number of individuals involved has not been disclosed, direct notification cannot be assumed. People who have participated in studies or received services connected to Novogene can take the following steps:

• Monitor official statements from the company for any future updates on the incident.
• Review account statements and correspondence for any unusual activity that might indicate misuse of personal details.
• Run a free exposure scan of their email address against known breach datasets to check for prior appearances of their information.

AICompiled with AI assistance from public sources and published under our editorial standards.