Amgen Discloses Data Breach Involving Patient Health Information in Third-Party Cloud Systems

Amgen, a California-based biotechnology company that develops and manufactures treatments for various diseases, has disclosed a data breach involving patient health information stored in third-party cloud systems. The company detected the unauthorized activity in July 2026 and responded by activating its cybersecurity response plan to contain the breach.

The investigation determined that attackers had extracted data from the affected cloud environments, including proprietary data, patient protected health information, and other sensitive information. Amgen has not yet disclosed which third-party cloud providers were involved or how they were breached.

Although the company believes that some files may hold sensitive information, it currently does not think the breach will have a material effect on its financial condition or operating results. The investigation is ongoing with support from outside cybersecurity specialists and Amgen plans to notify affected patients where required.