Amgen and Third-party cloud storage provider: Amgen discloses data breach, says patient information was stolen

Amgen Reports Data Breach, Patient Health Information Compromised in Third-Party Cloud Hack

On July 31, 2026, biopharmaceutical giant Amgen disclosed a cybersecurity breach involving unauthorized access to company data and patient health information. The incident, detected on July 29, targeted cloud storage systems managed by third-party providers, prompting Amgen to classify it as a "material" event due to the volume of affected files and the sensitivity of the exposed data.

The company has initiated its cybersecurity response plan, implementing containment measures and enlisting independent forensic experts to investigate the breach. While details on the scope of the stolen data remain limited, Amgen confirmed that patient information was among the compromised records.

The breach highlights growing risks in the healthcare and pharmaceutical sectors, where third-party cloud services are increasingly targeted by threat actors. Amgen’s regulatory filing underscores the incident’s potential impact on data privacy and operational security. Further updates on the investigation are expected as the company assesses the full extent of the compromise.

Source: https://www.channelnewsasia.com/business/amgen-discloses-data-breach-says-patient-information-was-stolen-6292031

Amgen cybersecurity rating report: https://www.rankiteo.com/company/amgen

Central Data Storage cybersecurity rating report: https://www.rankiteo.com/company/central-data-storage

"id": "AMGCEN1785529893",
"linkid": "amgen, central-data-storage",
"type": "Breach",
"date": "7/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Patients',
                        'industry': 'Healthcare/Pharmaceutical',
                        'name': 'Amgen',
                        'size': 'Large',
                        'type': 'Biopharmaceutical Company'}],
 'attack_vector': 'Third-party cloud storage systems',
 'data_breach': {'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Patient health information, '
                                             'company data'},
 'date_detected': '2026-07-29',
 'date_publicly_disclosed': '2026-07-31',
 'description': 'Amgen disclosed a cybersecurity breach involving unauthorized '
                'access to company data and patient health information. The '
                'incident targeted cloud storage systems managed by '
                'third-party providers, resulting in the exposure of sensitive '
                'data.',
 'impact': {'data_compromised': 'Patient health information and company data',
            'identity_theft_risk': 'High',
            'systems_affected': 'Third-party cloud storage systems'},
 'investigation_status': 'Ongoing',
 'references': [{'source': 'Amgen Regulatory Filing'}],
 'regulatory_compliance': {'regulatory_notifications': 'Regulatory filing '
                                                       'submitted'},
 'response': {'containment_measures': 'Implemented',
              'incident_response_plan_activated': 'Yes',
              'third_party_assistance': 'Independent forensic experts'},
 'title': 'Amgen Data Breach - Patient Health Information Compromised in '
          'Third-Party Cloud Hack',
 'type': 'Data Breach'}