Amgen Discloses Material Cybersecurity Incident Involving Exfiltrated Patient Data
Amgen disclosed in an SEC 8-K filed July 31, 2026 that unauthorized actors accessed and exfiltrated some company data, including proprietary data and patient protected health information, from cloud environments hosted by third-party providers. The company determined on July 29, 2026 that the incident is material, but says it has not identified any impact on products, manufacturing, financial reporting systems, or its ability to meet patient needs, and does not expect a material effect on financial condition or results.
Key points
- Unauthorized activity was identified in July 2026 in data stored in third-party-hosted cloud environments.
- Company determined on July 29, 2026 that the incident is material, citing file volume and the sensitivity of the information.
- Amgen believes the incident is not reasonably likely to have a material impact on its financial condition or results of operations.
- Investigation is ongoing, and patient notifications will be made as required.
The filing
Written by AI (Anthropic Claude, claude-haiku-5-5) on Nov 8, 2026, 2:16 AM ET, from the text of the filing and its press-release exhibits only. Written later: this filing was briefed after the fact, when past filings were added to the site, so the brief may be read with hindsight; the filing itself is the record of what was known on July 31, 2026.
Briefs are written by AI from the filing text (each brief's own page names the model) and can contain mistakes — open the filing before acting on anything. Impact (1-5) and tone are the model's reading of the filing for shareholders, not a price forecast. Not investment advice.