Amgen reports patient health information taken from third-party cloud environments

Amgen, the biotechnology company, disclosed on July 31, 2026 that it had found unauthorized activity involving data stored in cloud environments run by third-party providers, and that some data had been exfiltrated. The filing gives only the month of detection, July 2026, and a materiality decision on July 29.

What Amgen disclosed

The company said the data taken included proprietary data and patient protected health information. Amgen reported no effect on its products, manufacturing, financial reporting or ability to meet patient needs.

The materiality determination turned on the volume and possible sensitivity of the files. Amgen did not expect a material financial effect.

Not yet known at filing

Amgen was still assessing what categories of patient, business, intellectual property and research information were involved, and the filing does not name the cloud providers.