Amgen Reports July Data Breach Involving Patient Protected Health Information

Amgen Inc., a California-based multinational biopharmaceutical company, has disclosed a data breach that occurred in July 2026. The incident involved unauthorized activity in cloud environments hosted by third-party providers, resulting in the theft of proprietary company data and patient protected health information.

The forensic investigation confirmed that attackers had exfiltrated data from the cloud environments, including sensitive information about patients. Amgen activated its cybersecurity response plan and engaged cybersecurity experts to investigate the incident. On July 29, 2026, Amgen concluded that the breach was material due to the volume of files involved and the potential sensitivity of the stolen information.

Affected individuals may face an increased risk of medical identity theft and fraud. Edelson Lechtzin LLP is investigating a potential class action to pursue legal remedies on behalf of those whose sensitive information may have been compromised in the Amgen breach.