DisclosureLens
HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)PHIIdentity (basic)Government IDHealth (basic)Financial accountMediumActive

AMGEN INC.

bd_52cbf13bacf25283 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jul 2, 2026

Filed

Aug 18, 2026

To disclose

7 weeks

Affected

80state residents only

Linked

6 filings

Confidence

67%
Full breach record for AMGEN INC.8 incidents on file

Amgen Inc. notified the NH Attorney General of a data security incident discovered on July 2, 2026, involving unauthorized third-party access to cloud-hosted systems. On July 18, 2026, it was determined that patient personal and health information, including names, emails, addresses, dates of birth, government IDs, medical info, and for some, SSNs and bank account numbers, was acquired. 80 New Hampshire residents were affected. Notices were mailed on August 17, 2026. The investigation is ongoing.

Incident timeline

discovery → filing · 7 weeks / 47 days

Jul 2, 2026

Discovered

Aug 18, 2026

Filed

vs. sector median

6 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filingup to 17d gap

Filing propagation · 6 filings · 5 states

View merged incident ↗
SEC 8-KJul 31 · first
Illinois State AGAug 1 · first
New Hampshire State AG+17d · this page

Pattern: first filing Jul 31, last Aug 18 (NH) — a 17-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.