Case Law

Amgen Data Breach Class Action Lawsuit Filed Over Negligent Cybersecurity

United States·Briefly Analysis⏱️ 3 min read

Summary

  • A class action lawsuit has been filed against Amgen alleging that the company failed to protect customers' personal data from cybercriminals.
  • The breach compromised over 100 customers' personal data nationwide, including sensitive health-related information.
  • Humphreys claims that Amgen's deficient cybersecurity practices led to the data breach and seeks damages, restitution, and disgorgement.

What Happened

“The wealth of publicly available information and industry warnings regarding cyberattacks makes defendant’s failures all the more egregious,” Humphreys says in the complaint.

A class action lawsuit has been filed against Amgen, a prescription drug giant, alleging that the company failed to protect customers' personal data from cybercriminals. In July, a group of hackers infiltrated Amgen's computer systems and accessed sensitive information, including names, addresses, billing details, health conditions, diagnoses, and other health-related data. The lead plaintiff, Heidi Humphreys, claims that Amgen's deficient cybersecurity practices led to the data breach, which compromised over 100 customers' personal data nationwide. Humphreys believes that the stolen information can be sold on the dark web for a significant price, ranging from $40 to $200 per victim, and that law enforcement has difficulty policing such activity due to encryption.

Legal Context

The lawsuit alleges negligence and negligence per se against Amgen, claiming that the company failed to implement reasonable measures to prevent cybercriminals from obtaining data in its custody. Humphreys cites industry warnings and publicly available information about cyberattacks as evidence of Amgen's failures. The complaint also highlights the potential consequences of identity theft, including emotional distress and anxiety, which Humphreys claims she has suffered as a result of the breach. The putative class seeks damages, restitution, and disgorgement, as well as a court order requiring Amgen to update and secure its computer systems.

Why It Matters

The Amgen data breach highlights the importance of robust cybersecurity measures in protecting sensitive customer information. As Humphreys notes, once personal data is stolen, it can be sold on the dark web for a significant price, and law enforcement often struggles to track down perpetrators due to encryption. The lawsuit serves as a reminder that companies have a responsibility to safeguard their customers' data and must take proactive steps to prevent cyberattacks. Lawyers representing clients whose personal data was stolen in the Amgen breach should advise their clients to monitor their financial accounts and credit reports for potential identity theft, as well as be on the lookout for spear phishing messages tailored to their specific information.

Practical Implications

Lawyers representing clients whose personal data was stolen in the Amgen data breach should advise their clients to monitor their financial accounts and credit reports for potential identity theft, as well as be on the lookout for spear phishing messages tailored to their specific information.

Source

Source: Original reporting via Courthouse News

Get Deeper AI analysis

How does this affect you?

Get an AI analysis of this article grounded in your jurisdictions, practice areas, and any policy documents you've uploaded to Wansom.

Wansom is AI and can make mistakes.

Amgen Data Breach Class Action Lawsuit Filed Over Negligent Cybersecurity | Briefly