AMGEN INC.

Amgen Inc. filed an 8-K disclosing a material cybersecurity incident in July 2026 involving unauthorized access to third-party cloud environments. Proprietary data and patient protected health information (PHI) were exfiltrated. The investigation is ongoing, and the company has engaged forensic experts and implemented containment measures. No impact to manufacturing or financial reporting was identified.

Amgen Inc. notified individuals that their personal information may have been accessed due to a data security incident at its service provider, Sirva Relocation, LLC. Unknown actors accessed Sirva systems between August 16, 2023, and October 17, 2023, copying files containing employee data including names, SSNs, financial accounts, and health information. Sirva detected the activity on September 29, 2023. Amgen engaged in an investigation, secured the network, and offered identity monitoring services via Kroll.

Amgen Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-08-16 and was reported on 2024-09-25. 4 Indiana residents were affected. 903 individuals affected in total.

Amgen Inc. reported a supplemental data security incident involving its third-party service provider, Sirva, Inc. Sirva systems were accessed by unknown actors between August 16 and October 17, 2023, resulting in the copying of files containing personal information of Amgen employees and clients. Sirva detected suspicious activity on September 29, 2023. The incident affects 3 New Hampshire residents. Amgen engaged forensic review, notified law enforcement, and provided identity monitoring services via Kroll to affected individuals.

Amgen Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-02-21 and was reported on 2024-05-30. 45,980 Indiana residents were affected.

Amgen Inc reported a data breach to the Montana Attorney General. The breach was reported on 2023-08-23. The breach occurred from 6/3/2023 to 7/31/2023. 1 Montana residents were affected.

Amgen Inc. disclosed a data breach involving its service provider, ZS Associates. An unauthorized party compromised a ZS service account and accessed files related to Amgen patients between April 21, 2021, and May 14, 2021. Amgen was notified on May 27, 2021. Affected data included names, email addresses, city, state, zip code, age, gender, insurance type, and marketing material preferences. No SSNs or financial data were involved. Amgen retained forensic investigators and is offering credit monitoring.

Amgen Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2021-06-22. The breach occurred during 4/21/2021 - 5/14/2021. The breach was discovered on 5/27/2021. 101,445 individuals were affected. Notice was sent on 6/22/2021.

On February 21, 2018, Willis Towers Watson (WTW), a vendor of Amgen Inc., suffered a phishing incident that led to unauthorized access to personal information. The data involved included names, addresses, phone numbers, and claim/injury descriptions of individuals involved in civil litigation and workers' compensation claims against Amgen. WTW engaged a cybersecurity firm to investigate, activated security protocols, and offered affected individuals complimentary TransUnion credit monitoring.