FulcrumSec, a cyber extortion group that emerged in October 2025, has said in a message posted online that it spent more than two months in Novo Nordisk's networks stealing data.