Amgen Inc. (NASDAQ: AMGN) disclosed that it identified unauthorized activity in July 2026 involving data stored in cloud environments hosted by third-party cloud service providers.

According to a filing, the company determined that some of its data, including proprietary data, patient protected health information, and other information, was exfiltrated from these cloud environments. Amgen activated its cybersecurity response plan, implemented containment measures, and engaged independent cybersecurity forensic experts following detection of the activity.

On July 29, 2026, the company determined the incident is material, citing the volume of files affected and the potential sensitivity of the information contained in those files. The investigation remains ongoing.

Amgen stated it has not identified any impact to its products, manufacturing operations, financial reporting systems, or its ability to meet patient needs. The company said it believes the incident is not reasonably likely to have a material impact on its financial condition or results of operations.

The company said it continues to assess the extent to which patient data, confidential business information, intellectual property, and research and development information may have been accessed or acquired. Amgen added it is evaluating applicable regulatory and legal notification requirements and will notify impacted patients as required.