Amgen Faces Class Action Over July Data Breach Exposing Sensitive Customer Information
A Pennsylvania resident has filed a federal class action lawsuit against Amgen, claiming that the pharmaceutical company failed to protect her personal data after a group of cybercriminals stole sensitive information in July. The plaintiff, Heidi Humphreys, alleges that Amgen's inadequate cybersecurity practices allowed hackers to access the personal details of over 100 customers nationwide.
The stolen data includes names, addresses, billing information, health conditions, diagnoses, and other health-related data. Humphreys claims that Amgen disregarded her and potential class members' rights by failing to implement reasonable measures to prevent cybercriminals from obtaining this sensitive information.
According to the complaint, publicly available information and industry warnings indicate that cyberattacks are a foreseeable result of inadequate cybersecurity practices. The plaintiff notes that stolen identity credentials can be sold on the dark web for prices ranging from $40 to $200 per person, making it difficult for law enforcement to track down those responsible.
Humphreys says she suffered emotional distress and anxiety after receiving spam calls and text messages, as well as having fraudulent accounts opened under her name. She seeks a court order requiring Amgen to update and secure its computer systems, as well as damages, restitution, and disgorgement for the company's alleged negligence.