Pharmaceutical industry leader Amgen recently reported a significant cybersecurity incident involving unauthorized access to its internal systems hosted within third-party cloud environments. The breach, which compromised both proprietary corporate data and sensitive patient health information, has prompted an internal investigation into how threat actors bypassed existing security controls to gain access to stored records.

According to BleepingComputer, the unauthorized parties successfully extracted data from multiple cloud-based platforms utilized by the company. While the exact scope of the compromised information remains under evaluation, the nature of the breach suggests that protected health details were among the files accessed. Amgen has stated that it is working alongside external cybersecurity experts and relevant authorities to mitigate the damage and secure the affected cloud infrastructure against future vulnerabilities.

This incident highlights the growing risks associated with enterprise reliance on third-party service providers for data storage and management. As organizations continue to migrate sensitive operations to the cloud, securing those perimeters has become a critical challenge. The company is currently engaged in the notification process for individuals whose personal data may have been exposed, though specific details regarding the duration of the unauthorized access or the origin of the attack have not been fully disclosed to the public at this time.