In July 2026, Amgen disclosed a data breach resulting from unauthorized access to data stored in cloud environments operated by third-party service providers. The attackers exfiltrated sensitive corporate data, including proprietary information and patient protected health information. The company initiated containment measures and forensic investigations upon detection. Details such as the specific cloud providers involved, attack vectors, and the number of affected individuals remain undisclosed. Amgen has not confirmed any association with known threat actors or extortion attempts. The breach was deemed material based on the volume and sensitivity of the data involved, but no material financial impact is currently anticipated.

The breach exposed sensitive corporate data and protected health information of patients, potentially compromising privacy and proprietary business information. The full scope of the data accessed or stolen is still under investigation. There is no confirmed financial impact or operational disruption reported by Amgen at this time.

Amgen has activated its cybersecurity response plan, implemented containment measures, and engaged independent forensic experts to investigate the incident. Since this breach involves third-party cloud providers, remediation and patching responsibilities lie primarily with those providers. Organizations affected by similar incidents should follow vendor advisories and legal notification requirements. No specific patches or fixes have been disclosed by Amgen. Monitoring ongoing investigations and complying with regulatory notification obligations are recommended.