Amgen Inc. Reports Data Breach to Indiana Authorities in 2026

Amgen Inc., a leading biotechnology and pharmaceutical company, disclosed a data security incident to the Indiana Attorney General on August 17, 2026. This breach, which occurred on July 1, 2026, involved a broad spectrum of sensitive personal and health information. Individuals affected face potential risks including medical and financial identity theft.

State: Indiana
Breach date: July 1, 2026
Reported: August 17, 2026

What may have been exposed

Full Name
Date of Birth
Social Security Number
Clinical Trial Participation Records
Medical History and Treatment Information
Health Insurance ID Number
Mailing Address
Email Address

Amgen Inc., a prominent biotechnology and pharmaceutical firm, officially reported a data security breach to the Indiana Attorney General's office on August 17, 2026. The company stated that the incident took place on July 1, 2026, and its investigation into the matter is currently in a monitoring phase.

The reported breach compromised a variety of sensitive data categories. These include Full Name, Date of Birth, Social Security Number, Clinical Trial Participation Records, Medical History and Treatment Information, Health Insurance ID Number, Mailing Address, and Email Address. The exposure of such a comprehensive set of personal and health identifiers is significant.

The exposure of this personal and health information presents potential challenges for those affected. Compromised medical data can lead to issues like fraudulent insurance claims, inaccuracies in medical histories, or unauthorized access to treatment information. Simultaneously, the exposure of core personal identifiers, including Social Security Numbers and Dates of Birth, can elevate the risk of various forms of financial identity theft, unauthorized account access, and phishing scams.

As an organization that handles extensive confidential patient and personal data, Amgen Inc. is obligated to maintain stringent security measures. The occurrence of this data breach suggests an incident where these protective protocols may have been compromised, leading to the unauthorized exposure of sensitive information.

Individuals who receive an official notification regarding this incident are advised to take protective measures. It is generally recommended to carefully review all financial statements and medical explanation of benefits for any unauthorized activity. Consider placing a fraud alert or a security freeze on your credit reports with the major credit bureaus. Staying vigilant against unsolicited communications that request personal information is also a crucial step.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Check for medical identity theft
Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.
Secure your online accounts
Change the password on any account that reused an exposed password and turn on two-factor authentication wherever it's offered.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Indiana Attorney General filing

Related data breach cases

Browse all Indiana data breaches View the full case directory