Amgen, a California-based biotechnology firm specializing in medicines for serious illnesses, has confirmed a data breach involving the exfiltration of proprietary corporate data and patient health information from multiple third-party cloud systems. The company detected unauthorized activity in July 2026 and initiated its cybersecurity response plan, which included implementing containment measures and engaging independent forensic experts for investigation.
The investigation revealed that attackers successfully stole sensitive data from these cloud environments. Amgen stated in a Form 8-K filing with the SEC that "some of its data, including proprietary data, patient protected health information, and other information, has been exfiltrated from these cloud environments." The company is still assessing the full scope of the breach, including whether additional confidential business information, intellectual property, research and development data, or other patient information was accessed or stolen.
On July 29, Amgen determined the incident to be material, based on the volume of potentially impacted files and the likelihood of sensitive information being compromised. However, the company currently does not anticipate a material impact on its financial condition or operating results.
Amgen has not publicly identified the specific third-party cloud providers involved, detailed the method of compromise, or disclosed the number of individuals potentially affected. Furthermore, the company has not confirmed any links to known threat actors. The company is evaluating its legal and regulatory notification obligations and plans to inform affected patients as required.
Inquiries to Amgen regarding whether the breach involved a vishing attack targeting an employee's single sign-on account, the specific cloud services impacted, or any contact or extortion attempts by threat actors claiming to be ShinyHunters have not yet received a response. The incident follows a broader trend of data theft attacks on healthcare entities, with ShinyHunters being a notable group in this context.
