Amgen reports data breach impacting patient and corporate information

As reported by Bleeping Computer, pharmaceutical company Amgen has disclosed a data breach resulting from unauthorized access to sensitive corporate and patient data stored within third-party cloud systems.

Amgen detected the breach in July 2026 and initiated its cybersecurity response plan, engaging forensic experts to investigate. The investigation confirmed that attackers exfiltrated proprietary data, patient protected health information, and other sensitive information from compromised cloud environments operated by third-party service providers. The company is still assessing the full scope of the breach, including whether confidential business information, intellectual property, or additional patient data was accessed.

Amgen has not revealed the identity of the affected third-party providers, the method of compromise, or the number of individuals impacted. While the company does not currently anticipate a material impact on its financial condition, it is evaluating legal and regulatory notification requirements for affected patients. The investigation is ongoing with the assistance of external cybersecurity experts.

Source: Bleeping Computer