Amgen Reports Data Breach, Patient Health Information Compromised in Third-Party Cloud Hack On July 31, 2026, biopharmaceutical giant Amgen disclosed a cybersecurity breach involving unauthorized access to company data and patient health information. The incident, detected on July 29, targeted cloud storage systems managed by third-party providers, prompting Amgen to classify it as a "material" event due to the volume of affected files and the sensitivity of the exposed data. The company has initiated its cybersecurity response plan, implementing containment measures and enlisting independent forensic experts to investigate the breach. While details on the scope of the stolen data remain limited, Amgen confirmed that patient information was among the compromised records. The breach highlights growing risks in the healthcare and pharmaceutical sectors, where third-party cloud services are increasingly targeted by threat actors. Amgen’s regulatory filing underscores the incident’s potential impact on data privacy and operational security. Further updates on the investigation are expected as the company assesses the full extent of the compromise.

On June 22, 2021, the California Attorney General reported a data breach involving Amgen Inc. The breach occurred between April 21, 2021, and May 14, 2021, when an unauthorized party accessed files related to Amgen through a compromised service account at ZS Associates. Approximately 1,000 individuals were affected, with compromised information including names, email addresses, and demographic details, but no Social Security numbers or financial information were involved.