Item 1.05 Material Cybersecurity Incidents. In July 2026, Amgen Inc. (the "Company") identified unauthorized activity involving data stored in cloud environments hosted by third-party cloud service providers. Upon detecting the activity, the Company activated its cybersecurity response plan, implemented containment measures, and engaged independent cybersecurity forensic experts.…
Amgen discovers, develops, manufactures and delivers innovative medicines to fight some of the world’s toughest diseases. Harnessing the best of biology and technology, Amgen reaches millions of patients with its medicines. More than 45 years ago, Amgen helped establish the biotechnology industry at its U.S. headquarters in Thousand Oaks, California, and it remains at the cutting edge of innovation, using technology and human genetic data to push beyond what is known today. Amgen is advancing a broad and deep pipeline and portfolio of medicines to treat cancer, inflammatory conditions, rare diseases, heart disease and obesity and obesity-related conditions.
Select an item to read the extracted section. The as-filed document remains the primary evidence.
Item 1.05Item 1.05 - Material Cybersecurity Incidents
Item 1.05 Material Cybersecurity Incidents.
In July 2026, Amgen Inc. (the "Company") identified unauthorized activity involving data stored in cloud environments hosted by third-party cloud service providers. Upon detecting the activity, the Company activated its cybersecurity response plan, implemented containment measures, and engaged independent cybersecurity forensic experts.
The Company has since learned that some of its data, including proprietary data, patient protected health information, and other information, has been exfiltrated from these cloud environments. To date, the Company has not identified any impact to its products, manufacturing operations, or financial reporting systems, or to the Company's ability to meet patient needs. The investigation remains ongoing. The Company continues to assess whether, and/or the extent to which, patient, confidential business information, intellectual property, research and development, or other information may have been accessed, acquired, or exfiltrated and to evaluate the potential impact of the incident on the Company.
On July 29, 2026, in connection with our evaluation of the volume of the files that appear to have been impacted and the potential that the types of information in such files could be sensitive, the Company determined that this incident is material.
The Company believes, as of the date of this Current Report on Form 8-K, that the incident is not reasonably likely to have a material impact on the Company's financial condition or results of operations.
The Company takes its obligation to safeguard privacy and security of its patients’ data very seriously. The Company continues to evaluate applicable regulatory and legal notification requirements and will make all required notifications based on its findings, including to impacted patients.
To the extent any information required by Item 1.05(a) of Form 8-K was not determined or was unavailable at the time of this filing, the Company will amend this Current Report on Form 8-K as such information is determined or becomes available.