Back to all incidents

Amgen

amgen.com
CONFIRMED

Biotechnology company Amgen filed Form 8-K Item 1.05 disclosing unauthorized cyber activity detected in July 2026.

Observable Status CONFIRMED
Industry / Sector Technology & Commercial
Incident Classification Network Intrusion & Data Exfiltration
Attributed Threat Actor Unknown / Unattributed
Affected Population Scope Under Audit
First Seen 2026-07-31
Last Updated 2026-07-31
Personal Identifiable Information (PII) Corporate Contact Records
OPEN WEIGHTS TELEMETRY • DETERMINISTIC CONFIDENCE

Confidence & Source Corroboration

84% CONFIDENCE
1. Primary Authority CONFIRMED BY REGULATOR Base weight: 65%
2. Evidence Specificity +19% Statutory Filing Verified
3. Corroboration Curve +0% 1 independent domain
4. Timeline & Staleness +0% 1 milestone logged
Corroborated Source Domains:
sec.gov
STATUTORY REGULATORY DISCLOSURES

Official Regulatory Filings & Legal Compliance Records

1 Verified Statutory Filing
Regulatory Ground Truth Standard: The disclosures below represent formal statutory filings and enforcement records submitted to government regulatory authorities (SEC, State Attorneys General, HHS OCR, CISA). In accordance with repository principles, this data is captured exactly as filed by the reporting entity and is never modified, overridden, or synthesized by AI models.
U.S. Securities and Exchange Commission (SEC)

Form 8-K Item 1.05 (Material Cybersecurity Incidents)

CONFIRMED BY REGULATOR
Docket / Accession ID 0000318154-26-000119
Statutory Filing Date 2026-07-31
Disclosed Impact Scope Under Audit
Evidence Standard Regulatory Ground Truth
Statutory Filing Details & Summary (Preserved As Filed):

Item 1.05 Material Cybersecurity Incident disclosure filed by Amgen Inc. reporting detection of unauthorized threat actor activity across commercial and research enterprise systems.

View Official Regulatory Filing Document https://www.sec.gov/Archives/edgar/data/318154/000031815426000119/0000318154-26-000119-index.htm

Technical Forensic Briefing

Incident Overview

The Amgen cybersecurity event represents a confirmed Network Intrusion & Data Exfiltration within the Technology & Commercial sector, attributed to the Unknown / Unattributed cyber threat collective. Discovered through technical indicators and regulatory breach filings, the event resulted in unauthorized access to sensitive internal IT environments, with the exact population scope undergoing regulatory audit.

Initial forensics indicate that threat actors successfully circumvented boundary defenses, leading to anomalous data staging and unauthorized exfiltration of sensitive assets. Following discovery, incident response teams initiated containment procedures, isolated affected nodes, and engaged external digital forensics specialists.

Compromised Assets & Data Scope

Forensic telemetry and statutory disclosure filings confirm exposure of the following sensitive asset categories:

  • Primary Data Classes: Personal Identifiable Information (PII), Corporate Contact Records.
  • Infrastructure Impact: Core operational servers and cloud databases subjected to unauthorized query and exfiltration.
  • Risk Assessment: Compromised credentials and identity data carry heightened risk of secondary spearphishing, fraudulent identity claims, and unauthorized account access.

Statutory Disclosures & Compliance

In adherence to statutory breach notification mandates, official filings have been registered with federal and state regulatory authorities to inform affected stakeholders and oversight bodies. Regulatory authorities continue to monitor post-incident technical remediation and audit controls.

Milestone Timeline (1 events logged)

2026-07-31 16:15 UTC
CONFIRMED BY REGULATOR

SEC Form 8-K Item 1.05 Filing: Amgen discloses detection of unauthorized access to corporate IT systems and initiates incident response.

Have updated information or a new verifiable source?

This incident record is a flat Markdown file tracked in Git. Propose an update or add a milestone via Pull Request.

Propose Update via GitHub