8-KOther Events

AMGEN INC 8-K Report, Cybersecurity Incident (Jul 31, 2026)

Filed July 31, 2026For Securities:AMGN

Summary

Amgen Inc. (AMGN) has disclosed a material cybersecurity incident identified in July 2026. The company detected unauthorized activity in its third-party cloud environments, which resulted in the exfiltration of various types of data, including proprietary information, patient protected health information, and other sensitive data. While Amgen has activated its response plan, engaged forensic experts, and is conducting an ongoing investigation, it has not yet identified any impact on its products, manufacturing operations, financial reporting, or its ability to serve patients. The company is actively assessing the full scope of the exfiltrated data and its potential implications. Despite the material nature of the incident, Amgen currently believes it is not reasonably likely to have a material impact on its financial condition or results of operations. Amgen is evaluating regulatory and legal notification requirements and will comply with all necessary disclosures, including to affected patients, as its investigation progresses.

Key Highlights

  • 1Amgen Inc. disclosed a material cybersecurity incident involving unauthorized activity in third-party cloud environments.
  • 2Proprietary data, patient protected health information, and other sensitive information were exfiltrated.
  • 3The company has activated its cybersecurity response plan and engaged forensic experts.
  • 4No impact has been identified to date on products, manufacturing, financial reporting, or patient care.
  • 5Amgen is still investigating the full extent of the data breach and its potential impact.
  • 6The company currently believes the incident is unlikely to materially affect its financial condition or results of operations.
  • 7Amgen will make required regulatory and legal notifications, including to impacted patients.

Frequently Asked Questions

The incident involved the exfiltration of proprietary data, patient protected health information, and other information stored in third-party cloud environments. The full extent and nature of this data are still under investigation.

As of the filing date, Amgen has not identified any impact on its products, manufacturing operations, financial reporting systems, or its ability to meet patient needs. The company also believes the incident is not reasonably likely to have a material impact on its financial condition or results of operations.

Amgen has activated its cybersecurity response plan, implemented containment measures, engaged independent cybersecurity forensic experts, and is conducting an ongoing investigation to assess the full scope and impact of the breach. The company is also evaluating applicable regulatory and legal notification requirements.

Yes, Amgen states that it will make all required notifications based on its findings, including to impacted patients, as it evaluates applicable regulatory and legal requirements.