Overview
- Company filings say hackers accessed files stored in third-party cloud systems and exfiltrated corporate data including patient protected health information and proprietary material.
- Amgen declared the incident material after reviewing the volume and possible sensitivity of affected files and has implemented containment measures while forensic teams investigate.
- The company reports no current impact to products, manufacturing, financial reporting, or its ability to supply patients but is still determining what categories of data were taken.
- Amgen is evaluating legal and regulatory notification requirements and has pledged to notify affected parties, including patients, based on investigation findings.
- The breach underscores growing cloud and third-party risks in health care and raises reputational and regulatory stakes for Amgen as it faces separate scrutiny over its Tavneos drug.