Amgen Hit with Data Breach as Threat Actors Steal Corporate and Patient Info

Pharmaceutical giant Amgen has suffered a data breach in which threat actors stole corporate and patient information from multiple cloud systems operated by third-party providers. The company, based in California, develops medicines for serious illnesses such as cancer, cardiovascular disease, and rare diseases.

The incident was discovered on July 29, when the company's cybersecurity response plan was activated, and containment measures were put in place to prevent further unauthorized access. Amgen has hired independent forensic experts to investigate the breach and determine the extent of the damage.

According to a Form 8-K filing with the SEC, some of Amgen's data, including proprietary information and patient protected health information, was exfiltrated from the cloud environments. The company is still evaluating whether additional sensitive information was accessed or stolen, including confidential business info, intellectual property, research and development data, and other patient information.