Cybersecurity Event

What Happened

In July 2026, Amgen became aware of unauthorized third-party access to certain Amgen systems and data stored in cloud environments hosted by third-party cloud service providers. Upon detecting the activity, we promptly activated our cybersecurity response plan, began implementing containment measures, and engaged independent cybersecurity forensic experts.

Our investigation, which is ongoing, indicates that some Amgen data, including personal and health information of certain patients, may have been accessed or acquired as a result of this unauthorized activity.

How Do I Know If I’m Affected?

If you are one of these patients, you will be receiving a letter from Amgen providing you with additional information. If you do not receive a letter from Amgen, your information was not compromised.

Support for Patients

Affected patients are being offered identity monitoring at no cost for 24 months. The identity monitoring services include credit monitoring, fraud consultation, and identity theft restoration.

Steps You Can Take

We also encourage patients to remain vigilant against incidents of identity theft and fraud, to review account statements, and to monitor credit reports for suspicious activity.

What Amgen Is Doing

Amgen takes its obligation to safeguard the privacy and security of its patients’ data very seriously. We recognize that security incidents of this nature may cause concern, and we remain committed to supporting affected patients through this matter.

As with any cybersecurity incident, we are investigating this incident and will take appropriate actions.