ISO 27001 Certificate
SOC 1 Type I Certificate
SOC 2 Type II Certificate
PCI DSS
HIPAA
RGPD
Internal validation & live display
Multiple badges & continuous verification
Faster underwriting decisions
ISOSOC2 Type 1SOC2 Type 2PCI DSSHIPAAGDPR

Amgen harnesses the best of biology and technology to fight the world’s toughest diseases, and make people’s lives easier, fuller and longer. We helped establish the biotechnology industry, and we remain on the cutting-edge of innovation, using technology and human genetic data to push beyond what’s known today. Our investment in research and development has yielded a robust pipeline that builds on our existing portfolio of medicines to treat cancer, heart disease, osteoporosis, inflammatory diseases and rare diseases. Amgen is one of 30 companies comprising the Dow Jones Industrial Average®, and part of the Nasdaq-100 Index®. In 2024, Amgen was named one of the “World’s Most Innovative Companies” by Fast Company and one of “America’s Best Large Employers” by Forbes. For more information, visit Amgen.com and follow us on X, LinkedIn, Instagram, TikTok, YouTube and Threads. 🔗 Community Guidelines: https://wwwext.amgen.com/community-guidelines 🔗Global Privacy Statement Directory: www.amgen.com/dp Special Advisory: Please be cautious of scam recruitment offers claiming to be from Amgen. Such scams may come from various sources, including fake websites and/or unsolicited emails and seek to obtain personal data or payment from victims by offering jobs that do not exist. Please be advised that Amgen would never ask for payment to progress a job application. When in doubt, please check to see if the position in question is posted on this website before applying. Additionally, please report any suspicious recruiting activity to https://complaint.ic3.gov/ and thank you for your assistance.

Amgen A.I CyberSecurity Scoring

Amgen

Company Details

Linkedin ID:

amgen

Employees number:

38,011

Number of followers:

1,586,916

NAICS:

541714

Industry Type:

Biotechnology Research

Homepage:

amgen.com

IP Addresses:

0

Company ID:

AMG_2175186

Scan Status:

In-progress

AI scoreAmgen Risk Score (AI oriented)

Between 800 and 849

https://images.rankiteo.com/companyimages/amgen.jpeg
Amgen Biotechnology Research
Updated:
  • Powered by our proprietary A.I cyber incident model
  • Insurance preferes TPRM score to calculate premium
globalscoreAmgen Global Score (TPRM)

XXXX

https://images.rankiteo.com/companyimages/amgen.jpeg
Amgen Biotechnology Research
  • Instant access to detailed risk factors
  • Benchmark vs. industry & size peers
  • Vulnerabilities
  • Findings

Amgen Company CyberSecurity News & History

Past Incidents
1
Attack Types
1
EntityTypeSeverityImpactSeenBlog DetailsIncident DetailsView
Amgen Inc.Breach8544/2021
Rankiteo Explanation :
Attack with significant impact with customers data leaks

Description: On June 22, 2021, the California Attorney General reported a data breach involving Amgen Inc. The breach occurred between April 21, 2021, and May 14, 2021, when an unauthorized party accessed files related to Amgen through a compromised service account at ZS Associates. Approximately 1,000 individuals were affected, with compromised information including names, email addresses, and demographic details, but no Social Security numbers or financial information were involved.

Amgen Inc.
Breach
Severity: 85
Impact: 4
Seen: 4/2021
Blog:
Rankiteo Explanation
Attack with significant impact with customers data leaks

Description: On June 22, 2021, the California Attorney General reported a data breach involving Amgen Inc. The breach occurred between April 21, 2021, and May 14, 2021, when an unauthorized party accessed files related to Amgen through a compromised service account at ZS Associates. Approximately 1,000 individuals were affected, with compromised information including names, email addresses, and demographic details, but no Social Security numbers or financial information were involved.

Ailogo

Amgen Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

🔒
Incident Predictions locked
Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

🔒
A.I. Risk Score Predictions locked
Access Monitoring Plan
statics

Underwriter Stats for Amgen

Incidents vs Biotechnology Research Industry Average (This Year)

No incidents recorded for Amgen in 2025.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Amgen in 2025.

Incident Types Amgen vs Biotechnology Research Industry Avg (This Year)

No incidents recorded for Amgen in 2025.

Incident History — Amgen (X = Date, Y = Severity)

Amgen cyber incidents detection timeline including parent company and subsidiaries

Amgen Company Subsidiaries

SubsidiaryImage

Amgen harnesses the best of biology and technology to fight the world’s toughest diseases, and make people’s lives easier, fuller and longer. We helped establish the biotechnology industry, and we remain on the cutting-edge of innovation, using technology and human genetic data to push beyond what’s known today. Our investment in research and development has yielded a robust pipeline that builds on our existing portfolio of medicines to treat cancer, heart disease, osteoporosis, inflammatory diseases and rare diseases. Amgen is one of 30 companies comprising the Dow Jones Industrial Average®, and part of the Nasdaq-100 Index®. In 2024, Amgen was named one of the “World’s Most Innovative Companies” by Fast Company and one of “America’s Best Large Employers” by Forbes. For more information, visit Amgen.com and follow us on X, LinkedIn, Instagram, TikTok, YouTube and Threads. 🔗 Community Guidelines: https://wwwext.amgen.com/community-guidelines 🔗Global Privacy Statement Directory: www.amgen.com/dp Special Advisory: Please be cautious of scam recruitment offers claiming to be from Amgen. Such scams may come from various sources, including fake websites and/or unsolicited emails and seek to obtain personal data or payment from victims by offering jobs that do not exist. Please be advised that Amgen would never ask for payment to progress a job application. When in doubt, please check to see if the position in question is posted on this website before applying. Additionally, please report any suspicious recruiting activity to https://complaint.ic3.gov/ and thank you for your assistance.

Loading...
similarCompanies

Amgen Similar Companies

Biocon: Enhancing Global Healthcare Biocon Limited, publicly listed in 2004, is India's largest and fully-integrated, innovation-led biopharmaceutical company. It is an emerging global biopharmaceutical enterprise serving customers in over 120 countries. Driven by a vision to enhance global heal

Roche

Roche is a global pioneer in pharmaceuticals and diagnostics focused on advancing science to improve people’s lives. The combined strengths of pharmaceuticals and diagnostics under one roof have made Roche the leader in personalised healthcare – a strategy that aims to fit the right treatment to eac

Syneos Health

Syneos Health® is a leading fully integrated biopharmaceutical solutions organization built to accelerate customer success. We translate unique clinical, medical affairs and commercial insights into outcomes to address modern market realities. We bring together a talented team of professionals w

ICON plc

Since our foundation in Dublin, Ireland in 1990, our mission has been to help our clients to accelerate the development of drugs and devices that save lives and improve quality of life. We do this by delivering best in class information, solutions and performance, with an unyielding focus on quality

Thermo Fisher Scientific

About Thermo Fisher Scientific Thermo Fisher Scientific Inc. is the world leader in serving science, with annual revenue of approximately $40 billion. Our Mission is to enable our customers to make the world healthier, cleaner and safer. Whether our customers are accelerating life sciences research,

CSL is a leading global biopharma company with a dynamic portfolio of lifesaving medicines, including those that treat haemophilia and immune deficiencies, vaccines to prevent influenza, and therapies in iron deficiency, dialysis and nephrology. Since our start in 1916, we have been driven by our pr

Avantor® is a leading global provider of mission-critical products and services to customers in the biopharma, healthcare, education & government, and advanced technologies & applied materials industries. Our portfolio is used in virtually every stage of the most important research, development an

Agilent Technologies

Agilent customers are finding new ways to treat cancer, ensure food, water, air, and medicine quality and safety, discover new drug treatments, research infectious diseases, and create alternative energy solutions for a greener planet. From start to finish, we have them covered with our vast product

Charles River Laboratories

At Charles River, we are guided by our strong purpose—to create healthier lives—which centers around the patients who rely on the therapeutics we help to develop, the animals in our care, to our planet, and to the passionate and skilled people who are at the heart of our organization and make it all

newsone

Amgen CyberSecurity News

November 27, 2025 06:45 PM
Jobs: The deep-tech sectors actively recruiting

From semiconductors to advanced cybersecurity and AI, there are many exciting opportunities for skilled professionals in the deep-tech space...

October 03, 2025 07:00 AM
PBN’s 2025 Cybersecurity, AI & Tech Summit coming Oct. 9

WARWICK – The ever-evolving intersection of cybersecurity, artificial intelligence and business innovation is among the topics to be...

October 01, 2025 07:00 AM
Inaugural Advisory Board Meeting

The University of South Florida's Bellini College of Artificial Intelligence, Cybersecurity and Computing held its inaugural meeting of the...

September 02, 2025 07:00 AM
Amgen Plans $600M Center To Advance Biotech Innovation

Amgen to create center for science and innovation at California headquarters. Enveric Biosciences relocates its headquarters to Cambridge,...

June 24, 2025 07:00 AM
What’s Happening With Amgen Stock?

Amgen stock (NASDAQ:AMGN) fell 6% on Monday, June 23, 2025, after mid-stage clinical trial results for its long-acting experimental obesity drug, MariTide.

April 11, 2025 07:00 AM
Amgen’s First CTO Has Big Plans For AI–And An AI Head From Nike to Help Fulfill Them

Dr. David Reese, Amgen's first chief technology officer, set about hiring a head of artificial intelligence last year.

April 01, 2025 07:00 AM
Cybersecurity jobs available right now: April 1, 2025

Here are the worldwide cybersecurity job openings available as of April 1, 2025, including on-site, hybrid, and remote roles.

February 21, 2025 08:00 AM
Top 10 Tech Companies to Work for in Tampa in 2025

Key tech companies in Tampa for 2025 include Arrive Logistics, Citadel, JPMorgan Chase, MetLife, VelocityEHS, WISE, Citi, Amgen, and PwC.

January 06, 2025 08:00 AM
Amgen: The Buying Opportunity Has Now Arrived (Rating Upgrade)

Since my previous article, shares of Amgen meaningfully lagged the S&P 500 index. The company's revenue and non-GAAP EPS climbed higher in...

faq

Frequently Asked Questions

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.

Amgen CyberSecurity History Information

Official Website of Amgen

The official website of Amgen is http://www.amgen.com.

Amgen’s AI-Generated Cybersecurity Score

According to Rankiteo, Amgen’s AI-generated cybersecurity score is 821, reflecting their Good security posture.

How many security badges does Amgen’ have ?

According to Rankiteo, Amgen currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Does Amgen have SOC 2 Type 1 certification ?

According to Rankiteo, Amgen is not certified under SOC 2 Type 1.

Does Amgen have SOC 2 Type 2 certification ?

According to Rankiteo, Amgen does not hold a SOC 2 Type 2 certification.

Does Amgen comply with GDPR ?

According to Rankiteo, Amgen is not listed as GDPR compliant.

Does Amgen have PCI DSS certification ?

According to Rankiteo, Amgen does not currently maintain PCI DSS compliance.

Does Amgen comply with HIPAA ?

According to Rankiteo, Amgen is not compliant with HIPAA regulations.

Does Amgen have ISO 27001 certification ?

According to Rankiteo,Amgen is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Industry Classification of Amgen

Amgen operates primarily in the Biotechnology Research industry.

Number of Employees at Amgen

Amgen employs approximately 38,011 people worldwide.

Subsidiaries Owned by Amgen

Amgen presently has no subsidiaries across any sectors.

Amgen’s LinkedIn Followers

Amgen’s official LinkedIn profile has approximately 1,586,916 followers.

NAICS Classification of Amgen

Amgen is classified under the NAICS code 541714, which corresponds to Research and Development in Biotechnology (except Nanobiotechnology).

Amgen’s Presence on Crunchbase

No, Amgen does not have a profile on Crunchbase.

Amgen’s Presence on LinkedIn

Yes, Amgen maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/amgen.

Cybersecurity Incidents Involving Amgen

As of December 11, 2025, Rankiteo reports that Amgen has experienced 1 cybersecurity incidents.

Number of Peer and Competitor Companies

Amgen has an estimated 4,470 peer or competitor companies worldwide.

What types of cybersecurity incidents have occurred at Amgen ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

Incident Details

Can you provide details on each incident ?

Incident : Data Breach

Title: Data Breach at Amgen Inc.

Description: Unauthorized access to files related to Amgen Inc. through a compromised service account at ZS Associates.

Date Detected: 2021-05-14

Date Publicly Disclosed: 2021-06-22

Type: Data Breach

Attack Vector: Compromised Service Account

Threat Actor: Unauthorized Party

What are the most common types of attacks the company has faced ?

Common Attack Types: The most common types of attacks the company has faced is Breach.

How does the company identify the attack vectors used in incidents ?

Identification of Attack Vectors: The company identifies the attack vectors used in incidents through Compromised Service Account.

Impact of the Incidents

What was the impact of each incident ?

Incident : Data Breach AMG552072825

Data Compromised: Names, Email addresses, Demographic details

What types of data are most commonly compromised in incidents ?

Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Names, Email Addresses, Demographic Details and .

Which entities were affected by each incident ?

Incident : Data Breach AMG552072825

Entity Name: Amgen Inc.

Entity Type: Company

Industry: Biotechnology

Location: California

Customers Affected: 1000

Data Breach Information

What type of data was compromised in each breach ?

Incident : Data Breach AMG552072825

Type of Data Compromised: Names, Email addresses, Demographic details

Number of Records Exposed: 1000

Personally Identifiable Information: NamesEmail AddressesDemographic Details

References

Where can I find more information about each incident ?

Incident : Data Breach AMG552072825

Source: California Attorney General

Date Accessed: 2021-06-22

Where can stakeholders find additional resources on cybersecurity best practices ?

Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: California Attorney GeneralDate Accessed: 2021-06-22.

Initial Access Broker

How did the initial access broker gain entry for each incident ?

Incident : Data Breach AMG552072825

Entry Point: Compromised Service Account

Additional Questions

General Information

Who was the attacking group in the last incident ?

Last Attacking Group: The attacking group in the last incident was an Unauthorized Party.

Incident Details

What was the most recent incident detected ?

Most Recent Incident Detected: The most recent incident detected was on 2021-05-14.

What was the most recent incident publicly disclosed ?

Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2021-06-22.

Impact of the Incidents

What was the most significant data compromised in an incident ?

Most Significant Data Compromised: The most significant data compromised in an incident were Names, Email Addresses, Demographic Details and .

Data Breach Information

What was the most sensitive data compromised in a breach ?

Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Email Addresses, Names and Demographic Details.

What was the number of records exposed in the most significant breach ?

Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 100.0.

References

What is the most recent source of information about an incident ?

Most Recent Source: The most recent source of information about an incident is California Attorney General.

Initial Access Broker

What was the most recent entry point used by an initial access broker ?

Most Recent Entry Point: The most recent entry point used by an initial access broker was an Compromised Service Account.

cve

Latest Global CVEs (Not Company-Specific)

Description

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app_password parameter). Depending on local configuration, this password could be the extension, voicemail, user manager, DPMA or EPM phone admin password. This issue is fixed in versions 16.0.96 and 17.0.10.

Risk Information
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name (“write tool”), but in an LLM/agent context it becomes a high-risk capability: prompt injection or indirect prompt manipulation can cause execution of destructive queries such as DROP TABLE, TRUNCATE, DELETE, ALTER, or privilege-related statements (subject to DB permissions). Deployments that expose an agent with MySQLWriteTool enabled to untrusted input and/or run the tool with a DB user that has broad privileges are impacted. This issue is fixed in version 2.8.12.

Risk Information
cvss3
Base: 9.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Description

Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use MySQLSelectTool, which is vulnerable to Read-Only Bypass. MySQLSelectTool is intended to be a read-only SQL tool (e.g., for LLM agent querying, however, validation based on the first keyword (e.g., SELECT) and a forbidden-keyword list does not block file-writing constructs such as INTO OUTFILE / INTO DUMPFILE. As a result, an attacker who can influence the tool input (e.g., via prompt injection through a public agent endpoint) may write arbitrary files to the DB server if the MySQL/MariaDB account has the FILE privilege and server configuration permits writes to a useful location (e.g., a web-accessible directory). This issue is fixed in version 2.8.12.

Risk Information
cvss3
Base: 8.2
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Description

Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response. This issue is fixed in version 20.0.1.

Risk Information
cvss3
Base: 8.4
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
Description

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. This issue is fixed in versions 4.11.2 and 4.12.1.

Risk Information
cvss3
Base: 5.4
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N

Access Data Using Our API

SubsidiaryImage

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=amgen' -H 'apikey: YOUR_API_KEY_HERE'

What Do We Measure ?

revertimgrevertimgrevertimgrevertimg
Incident
revertimgrevertimgrevertimgrevertimg
Finding
revertimgrevertimgrevertimgrevertimg
Grade
revertimgrevertimgrevertimgrevertimg
Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network Security

Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)

Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)

Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat Intelligence

Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Top LeftTop RightBottom LeftBottom Right
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
Users Love Us Badge