Amgen reports cloud breach exposing patient and proprietary data

Amgen has disclosed a data breach affecting patient health information and proprietary corporate data held in cloud systems managed by external service providers. The California-based pharmaceutical company, which develops treatments for serious illnesses including cancer and cardiovascular disease, confirmed that threat actors gained unauthorized access to multiple cloud environments.

The breach exposed both patient data and sensitive corporate information. Amgen has not disclosed the number of affected individuals, the identity of the third-party providers involved, or the specific cloud platforms compromised. The company also has not indicated whether ransomware groups have claimed responsibility or if stolen data has appeared on extortion sites.

The incident underscores the persistent risk of supply chain vulnerabilities in healthcare IT infrastructure. Third-party cloud providers have become a common attack surface, allowing adversaries to breach multiple organizations through a single compromise. Amgen joins a growing list of pharmaceutical and healthcare entities that have suffered breaches through vendor relationships.

• 01Patients: health records may be exposed to identity theft or targeted phishing
• 02Amgen: faces regulatory scrutiny, potential HIPAA penalties, and intellectual property loss
• 03Third-party cloud vendors: likely to face contractual and reputational consequences
• 04Pharmaceutical sector: renewed focus on vendor risk management and cloud security controls