Amgen disclosed a significant cybersecurity breach involving third-party cloud storage systems that resulted in the unauthorized access of sensitive company data and patient health information.

Key Points

• Amgen confirmed the data breach on July 29 after evaluating the volume and sensitivity of the compromised files.
• The company has activated its cybersecurity response plan and engaged independent forensic experts to investigate the incident.
• Current assessments indicate no disruption to manufacturing operations, product supply, or financial reporting systems.
• The breach follows a series of recent cyberattacks targeting major healthcare firms, including Abbott Laboratories, Medtronic, and Novo Nordisk.
• Amgen is currently determining the full scope of the stolen data, which may include intellectual property and research information.

Why it Matters

This incident highlights the growing vulnerability of the healthcare sector to third-party cloud security failures and sophisticated cyberattacks. As companies increasingly rely on external providers, the potential for large-scale data exposure poses significant regulatory, legal, and reputational risks to the pharmaceutical industry.