What happened with the Amgen data breach, and how serious is it?

Seeing 'Amgen data breach' trending and something about patient information being stolen. What actually happened?

Amgen, one of the largest biotech/pharmaceutical companies in the US, disclosed on July 31, 2026, that hackers stole company data and patient health information from cloud storage systems operated by third-party vendors, not Amgen's own internal systems directly. In a regulatory filing (an SEC Form 8-K), the company said it first detected suspicious activity in its cloud environments earlier in July, and formally classified the incident as "material" on July 29 based on the volume of affected files and the sensitivity of the data involved — the stolen files reportedly include a mix of patient health details and proprietary business records. Amgen hasn't disclosed how many patients are affected, and said the incident isn't expected to have a material impact on its finances, though that's standard cautious language companies use in these filings rather than a cost estimate. It's part of a broader wave of healthcare-sector breaches in 2026 — Abbott Laboratories, Medtronic, Stryker, Novo Nordisk, and West Pharmaceutical Services have all disclosed similar incidents recently, several linked to the same hacking group. Amgen says it's legally obligated to notify affected patients directly, so if you're an Amgen patient, the right move is to wait for that official notification rather than act on the news alone.