Reported by 3 outlets

Quest Diagnostics reveals cyberattack compromised patient records in its Quanum lab system

Cybersecurity illustration · BleepingComputer

The story so far

AI summary of the reporting below · Updated · How we work

Quest Diagnostics discovered on October 21, 2026, that an unauthorized party breached its Quanum Lab Services Manager platform, exposing an unspecified number of patient records. The clinical laboratory provider disclosed the incident in a filing with the U.S. Securities and Exchange Commission, noting it has alerted law enforcement and brought in external investigators to assess the damage. [1][2][3]

The compromised Quanum platform is used by healthcare providers across North America to submit test orders, track statuses, and view diagnostic and billing records. To contain the incident, Quest halted Quanum LSM operations and temporarily suspended access to other tools such as LabHQ and Essential Insights, advising clients to rely on Quanum eLabs or paper requisitions in the interim. The company noted that direct-customer electronic medical record interfaces remain unaffected, though it has yet to confirm the full scope of personal health data accessed. [1][2]

The incident marks another major security challenge for Quest Diagnostics, which previously suffered a 2019 breach involving 11.9 million patients through a third-party billing vendor. While no threat group has immediately claimed responsibility for the latest breach, the intrusion follows a wider wave of ransomware and extortion attacks targeting health technology firms and medical records throughout the sector. [1][2]

Read the original reporting

3 outlets