Amgen Says Cloud Breach Exposed Patient and Proprietary Data

· Original article ↗

Summary

Amgen says attackers stole patient health and proprietary data from cloud environments operated by third-party providers. The company is investigating and assessing who may be affected.

Key points

  • Amgen detected unauthorized activity in its third-party cloud environments in July 2026.
  • The company says its investigation found that attackers exfiltrated proprietary data, patient protected health information, and other information.
  • Amgen is still assessing whether confidential business information, intellectual property, research and development data, or additional patient information was accessed or stolen.
  • The company has not disclosed the affected cloud providers, how the environments were compromised, the number of people affected, or a known threat actor.
  • Amgen activated its response plan, implemented containment measures, and engaged independent cybersecurity experts to investigate.
  • Amgen is evaluating legal and regulatory notification requirements and says it will notify affected patients where required.

Article Details

Victim Organization
Amgen
Incident Type
Data breach involving exfiltration of data from third-party cloud environments
Disclosure Date
2026-07-31
Data Types Exposed
  • Patient protected health information
  • Proprietary data
  • Potentially confidential business information, intellectual property, research and development data, and additional patient information; whether these were accessed or stolen is still being determined
Operational Impact
Amgen activated its cybersecurity response plan, implemented containment measures, and engaged independent forensic experts. The investigation is ongoing. Amgen does not currently believe the incident is reasonably likely to materially affect its financial condition or operating results.
Ransom Or Extortion
Unknown. The article asks whether Amgen was contacted or extorted by actors claiming to be ShinyHunters, but reports no response or confirmation.
Claim Status
confirmed

Industries