A Leaked GitHub Token Exposed the Exact Ozempic Formula
A leaked GitHub token exposed Novo Nordisk's proprietary Ozempic formula, with cybersecurity firm FulcrumSec disclosing that the breach occurred in 2026 and could have severe competitive and financial consequences for the pharmaceutical company.
Background
A GitHub token is a digital credential that grants automated access to code repositories. If leaked, attackers can read or steal proprietary source code.
- Novo Nordisk is a Danish pharmaceutical giant behind Ozempic and Wegovy, blockbuster drugs for diabetes and weight loss. Its market cap rivals the entire Danish GDP.
- FulcrumSec is the cybersecurity firm that discovered the leak. They found a token in a public GitHub repo that exposed Novo Nordisk's proprietary manufacturing process for semaglutide — the active ingredient in Ozempic. This is essentially the "formula" for one of the most valuable drugs in history.
- Why it matters: Such a leak could let competitors or generic manufacturers recreate the drug without years of R&D, threatening Novo Nordisk's market exclusivity and pricing power. It also illustrates how carelessly pharma companies can handle critical trade secrets on developer platforms.