Amgen discloses hack of patient health data from third‑party cloud services

Amgen Inc. reported that hackers accessed and exfiltrated patient health information stored in cloud systems operated by third‑party providers. The company filed a Form 8‑K with the U.S. Securities and Exchange Commission, describing the breach as material because of the volume and sensitivity of the data. Amgen has activated its cybersecurity response plan, engaged independent forensic experts, and is notifying regulators and affected patients, though it has not disclosed how many records were compromised. The incident did not affect the company’s products, manufacturing, financial reporting or ability to meet patient needs.

The breach underscores the biotech firm’s reliance on external cloud vendors for handling protected health information and comes as Amgen faces additional scrutiny over its rare‑disease drug Tavneos, following a retracted study and regulatory reviews in the United States and Europe.