Amgen Reports Cloud Breach Involving Patient Data

Amgen disclosed that attackers exfiltrated company data, including patient protected health information, from cloud environments operated by third-party providers. The company deemed the incident material on July 29, activated its incident-response plan, implemented containment measures, and retained forensic experts. Amgen is still assessing the scope of the exposure, notification obligations, and whether additional confidential, intellectual-property, or research data was affected; it reported no identified disruption to operations or patient services.