Amgen Data Breach Exposes Patient and Financial Information

Amgen Inc., one of the largest biotechnology companies in the world, disclosed a data breach in July 2026 involving patient personal information and health data. The breach affected at least 6,714 residents in Texas, 354 in Massachusetts and 24 residents in Vermont.

Amgen filed a report with the U.S. Securities and Exchange Commission on July 29, 2026. The breach was also reported to the attorney general in California.

On July 1, 2026, an unauthorized third party gained access to certain Amgen systems and data stored in cloud environments hosted by third-party cloud service providers. After Amgen became aware of the unauthorized access, the company launched an investigation.

On July 18, 2026, the investigation determined that the unauthorized third party had not only accessed but also acquired certain files containing patient personal information and health information.

The types of personally identifiable information compromised as a result of the breach included names, email addresses, postal addresses, dates of birth, Social Security numbers, driver's license numbers, state identification card numbers and other government-issued identification numbers and financial information such as bank account numbers and credit or debit card numbers.

Protected health information was compromised as well, including medical information and health insurance information.

Amgen's response to the breach

Amgen is offering affected adults 24 months of free identity monitoring services through Kroll.

For affected minors, Amgen is providing 24 months of minor identity monitoring through Kroll. This service detects when names, aliases or addresses become associated with a child's Social Security number, which could be an indicator of identity theft.

Affected individuals and parents of affected minors can enroll by visiting Kroll's enrollment website using the membership number included in their notification letter.

Amgen has set up a dedicated support line for those with questions about the breach. Affected individuals can email privacy@amgen.com or call 844-958-8971, Monday through Friday from 8:00 a.m. to 5:30 p.m. Central Time, excluding major U.S. holidays.