Overview
The notice confirms infrastructure access and malware but qualifies the personal-data impact. Specific fields are blank in the public sample and no total is given; neither is inferred. The incident occurred in 2025, while the earliest verified personal-data notice is in 2026.
Timeline
- Occurred
- Discovered
- Disclosed
Infrastructure intrusion and malware disrupted operations.
Notification of possible personal-data impact.
Organization response
Nova investigated with external specialists and law enforcement, enhanced safeguards and offered eligible people 24 months of identity-protection services.
What you can do
Review the individualized notice, watch account and credit activity and beware of phishing.
Sources
- Nova Biomedical notice dated January 27, 2026Vermont Attorney General / Nova Biomedical · 2026-11-09