On July 22, 2025, Nova Biomedical Corp. experienced a cybersecurity attack where an unauthorized actor accessed its electronic infrastructure and deployed malware. The company discovered the breach on December 18, 2025, and subsequently launched an investigation with the assistance of cybersecurity experts and coordinated with law enforcement. Nova Biomedical Corp. is a medical device manufacturing and diagnostics company headquartered in Waltham, MA.
The breach affected 10,764 individuals across the United States. The exposed data includes names, Social Security numbers, dates of birth, addresses, government IDs (such as driver’s licenses), medical information, financial information including credit/debit card numbers, and financial account information. State Attorneys General in Indiana, Maine, Massachusetts, and Vermont have received notice of this incident.
Nova Biomedical Corp. sent written notification to affected consumers on January 27, 2026. The company offered 24 months of identity restoration services through Experian IdentityWorks. Information about the cybersecurity attack has been made public on the company website.