BIOTECH GIANT AMGEN REPORTS THEFT OF PATIENT HEALTH INFORMATION AND PROPRIETARY DATA FROM THIRD-PARTY CLOUD SYSTEMS

THOUSAND OAKS, Calif. — Biotechnology company Amgen has disclosed that attackers stole proprietary company information, patient protected health information, and other data from cloud environments operated by third-party service providers.

Amgen identified the unauthorized activity in July 2026 and activated its cybersecurity response plan after discovering the intrusion. The company implemented containment measures and retained independent cybersecurity forensic experts to investigate the incident.

The company confirmed in a Form 8-K filed with the Securities and Exchange Commission that data had been exfiltrated from the affected cloud environments. Data exfiltration refers to the unauthorized removal or transfer of information from a system.

The stolen information includes Amgen proprietary data, patient protected health information, and other records. The company is continuing to determine whether confidential business information, intellectual property, research and development material, additional patient information, or other sensitive data was accessed, acquired, or removed.

Amgen has not disclosed how the attackers gained access to the cloud environments. The filing does not identify the affected cloud-service providers, the number of patients involved, the volume of stolen data, or the period during which the unauthorized access remained active.

The company has not attributed the intrusion to a particular threat actor or criminal organization. Its filing does not describe the incident as a ransomware attack and does not state that any systems or information were encrypted.

Amgen reported that it has not identified any impact on its products, manufacturing operations, financial-reporting systems, or ability to meet patient needs. The company’s investigation remains active, leaving the complete scope of the compromise unresolved.

On July 29, Amgen determined that the cybersecurity incident was material after evaluating the apparent volume of affected files and the possibility that those files contained sensitive information.

That determination does not mean Amgen expects the breach to produce a material financial loss. The company stated that, based on the information available when it filed the report, the incident was not reasonably likely to materially affect its financial condition or operating results.

The distinction is significant. An event may require disclosure because of the sensitivity, volume, or potential importance of the compromised information while the company separately determines that its overall financial condition is unlikely to sustain a material effect.

Amgen is evaluating the legal and regulatory notification requirements arising from the breach. The company said it will provide all required notices based on the results of its investigation, including notifications to affected patients.

Protected health information can include identifiable medical, treatment, insurance, demographic, or patient-service records, depending on the data maintained in the affected environment. Amgen has not publicly identified the specific fields exposed in this incident, making it premature to determine the precise risks facing individual patients.

The compromise occurred within cloud environments hosted by outside providers rather than systems Amgen identified as part of its internal manufacturing or financial-reporting infrastructure. Reliance on a third party does not eliminate the effect on Amgen or its patients when company-controlled information is exposed through an externally hosted environment.

Amgen has not stated whether credentials, Social Security numbers, insurance information, clinical-trial records, genetic information, payment data, or government identification numbers were among the compromised records. It has also not disclosed whether the affected environments have been fully restored or whether additional containment work remains underway.

The company develops and markets medicines used across oncology, bone health, cardiovascular disease, inflammation, rare diseases, and other areas. Its product portfolio includes Prolia, Xgeva, Kyprolis, Lumakras, Enbrel, Repatha, Blincyto, and several other treatments used by patients worldwide.

The absence of any identified impact on Amgen’s products, manufacturing operations or ability to meet patient needs limits the immediate operational effect of the incident. The theft of patient health information and proprietary corporate data creates a separate confidentiality concern that could continue after the affected cloud environments are secured.

Amgen signed the SEC filing through Executive Vice President, General Counsel, and Secretary Jonathan P. Graham. The company stated that it may amend its disclosure when information required under federal cybersecurity-reporting rules becomes available or is conclusively determined.

The full consequences of the breach will depend on what the continuing forensic investigation uncovers, how many individuals are affected, the sensitivity of the stolen information, and whether the attackers attempt to exploit or distribute the data. Until Amgen completes that assessment, the exposure remains a confirmed data-theft incident with an undetermined impact on patients and the company’s confidential information.

Amgen Inc. / U.S. Securities and Exchange Commission. ( Free Download)

🔥 NOW AVAILABLE! 🔥

‎👉 Eclipsera – Apple Music

Sponsored • TRJ Ads
Inquiries: contact@therealistjuggernaut.com

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE