RCMECredit materiality pre-analysisIncludes illustrative values
Analytical aid.Not a rating or rating recommendation. Public data only.
Amgen
CIK
0000318154
SIC
2836
Event
8-K Item 1.05 · cyber incident
Identified
Needs analyst input
Filed
2026-07-31
Overall
Moderate
Audit trailOpen memo

Event lands · filed 2026-07-31

Amgen: Form 8-K Item 1.05

Identified Needs analyst input. Disclosed 2026-07-31. Filed 2026-07-31.

Disclosure excerpt

Verified

In July 2026, Amgen Inc. (the "Company") identified unauthorized activity involving data stored in cloud environments hosted by third-party cloud service providers. Upon detecting the activity, the Company activated its cybersecurity response plan, implemented containment measures, and engaged independent cybersecurity forensic experts. The Company has since learned that some of its data, including proprietary data, patient protected health information, and other information, has been exfiltrated from these cloud environments. To date, the Company has not identified any impact to its products, manufacturing operations, or financial reporting systems, or to the Company's ability to meet patient needs. The investigation remains ongoing.

Verbatim match to filing. Filing 0000318154-26-000119 · content sha256 08baa2966474

Quoted text is exempt from the vocabulary guard and tagged as quoted. Excerpt checked as an exact substring in code.

Structured incident

extraction_system.v2

DerivedAnalyst-confirmed
FieldValueProvenance
incident_typedata_exfiltrationDerived
attack_vectorunknownDerived
systems_affectedcloud environments hosted by third-party cloud service providersDerived
data_types_compromisedPHIDerived
operational_statusfully_operationalmodel: unknown; reviewer ShaunakAnalyst-confirmed
regulatory_obligationsunknownDerived
third_party_impactNeeds analyst inputDerived
discovery_dateNeeds analyst inputDerived
disclosure_date2026-07-31Derived
containment_statusunknownDerived
discovery_to_disclosure_daysNeeds analyst inputDerived
unknown_fieldsattack_vector, regulatory_obligations, third_party_impact, discovery_date, containment_status, discovery_to_disclosure_daysDerived
event_classcyber_incidentDerived

Analyst review

Append-only. Each review is a row on the audit trail.
IncidentFieldModel valueConfirmed valueReviewed (UTC)Note
Amgen2026-07-31operational_statusunknownfully_operational Analyst-confirmed2026-10-19 22:13:02Filing: "To date, the Company has not identified any impact to its products, manufacturing operations, or financial reporting systems, or to the Company's ability to meet patient needs." Amgen Form 8-K, Item 1.05. Reviewer: Shaunak.