Biotechnology giant Amgen has disclosed a data breach involving third-party cloud storage systems, revealing that cybercriminals exfiltrated patient health information and corporate data.
The California-based pharmaceutical developer detected unauthorized activity in July 2026, prompting the activation of its internal cybersecurity response plan and containment protocols.
Independent forensic investigators were hired to assess the breach.
On July 29, 2026, the company determined the incident was material after evaluating the volume of impacted files and the sensitive nature of the compromised data.
Details of the Breach
In a Form 8-K filing with the SEC, Amgen stated: "The Company has since learned that some of its data, including proprietary data, patient protected health information, and other information, has been exfiltrated from these cloud environments."
The company is continuing to evaluate whether additional intellectual property, research and development data, or business records were compromised, according to regulatory filings reported by Reuters and BleepingComputer.
Amgen confirmed that the incident has not impacted its manufacturing operations, drug products, financial reporting systems, or ability to serve patient needs.
The company does not expect a material impact on its financial condition.
As forensic investigations proceed, Amgen is reviewing legal and regulatory notification mandates to inform affected individuals and patients.
