Amgen, one of the world’s largest biopharmaceutical companies, has disclosed that hackers gained unauthorized access to cloud storage systems operated by third-party providers and exfiltrated company data, including patients’ protected health information. The company reported the incident in a filing with the U.S. Securities and Exchange Commission on July 31, 2026.
Companies entrusted with sensitive patient and proprietary information have a responsibility to keep that data secure, and when a breach occurs, those affected deserve to know what happened and what options they may have.
Amgen’s Data Breach Investigation
According to a Form 8-K filed with the Securities and Exchange Commission, Amgen identified unauthorized activity in July 2026 affecting data stored in cloud environments hosted by third-party providers. The company activated its cybersecurity response plan, put containment measures in place, and brought in independent forensic experts to investigate the scope of the intrusion.
On July 29, 2026, Amgen concluded that the incident was material based on the volume of files that appeared to be involved and the potential sensitivity of the exfiltrated information. The company has said some of the data taken from the cloud environments included proprietary business data as well as patients’ protected health information, though Amgen has stated its investigation into the full scope of the incident remains ongoing. As of this writing, Amgen has not disclosed a specific number of individuals affected, the identities of the third-party cloud providers involved, or the exact method the intruders used to gain access.
Amgen has said it has not identified any impact on its products, manufacturing operations, financial reporting systems, or its ability to meet patient needs as a result of the incident. The company has also said it is still evaluating what regulatory and legal notifications are required and intends to notify affected parties, including patients, based on the findings of its ongoing investigation.
This disclosure arrives amid a broader wave of cyberattacks against companies in the healthcare and life sciences sector, which has become an increasingly common target for hackers in recent years. Pharmaceutical and healthcare organizations store enormous volumes of highly sensitive information, including patients’ medical histories and diagnoses alongside valuable proprietary research and business data, making them an attractive target for both financially motivated cybercriminals and groups seeking to steal intellectual property. Incidents involving third-party cloud vendors, like the one Amgen has described, have also become more frequent industry-wide, since a single vulnerability in a shared cloud environment can potentially expose data belonging to many different corporate clients at once.
The combination of data types Amgen says may have been exposed, protected health information alongside confidential corporate data, can carry serious downstream risk for the people affected. Protected health information is especially valuable to identity thieves and scammers because, unlike a credit card number, it generally cannot be canceled or reissued, and it can be used to commit medical identity theft, file fraudulent insurance claims, or craft convincing phishing schemes that reference a person’s real medical history. Because the investigation is still underway, it is not yet clear whether Amgen will offer credit monitoring or identity protection services to those impacted, or when formal notification letters might be sent.
When Did This Breach Occur?
Amgen has said it identified unauthorized activity involving its third-party-hosted cloud environments in July 2026. After evaluating the scope of the files potentially involved and the sensitivity of the information at issue, the company determined on July 29, 2026 that the incident was material. Amgen publicly disclosed the breach two days later, on July 31, 2026, in a filing with the Securities and Exchange Commission. The company has not yet announced a timeline for notifying affected individuals directly, stating that its investigation and related legal and regulatory analysis remain ongoing.
What Information Was Breached?
Per Amgen’s own disclosure, the exfiltrated data is understood to include proprietary business data and patients’ protected health information (PHI). Amgen has not yet published a detailed, itemized list of the specific data elements involved, such as whether Social Security numbers, financial account information, or specific medical record details were part of the exposed files. The company has indicated that its investigation into the full scope and nature of the compromised information is continuing, and additional detail may be released as that work progresses.
What You Can Do
If you believe you may have been affected by the Amgen data breach, consider taking the following steps to help protect yourself:
- Watch for a notification letter from Amgen and keep it in a safe place as proof you were affected.
- Monitor your financial accounts, insurance statements, and medical records for unfamiliar activity.
- Consider placing a fraud alert or credit freeze with the major credit bureaus.
- Be cautious of phishing emails, calls, or texts referencing the breach, since scammers often exploit news of a data breach to trick victims into revealing further personal information.
- Review any account statements tied to your healthcare providers or insurers for signs of medical identity theft.
File a Data Breach Lawsuit Against Amgen
If your information was exposed as a result of the Amgen data breach, you may have legal options available to help recover compensation for the time, expense, and risk this incident has caused you. A class action lawsuit could also push Amgen to strengthen the safeguards it uses to protect the data entrusted to it, including the cloud systems managed by its third-party providers.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
