Cybersecurity
Quest Diagnostics says patient records were exposed
Quest Diagnostics said unauthorised access to its Quanum LSM system may have exposed patient records, while the company continued to investigate, notified regulators and law enforcement, and paused some systems as a precaution.
- Quest Diagnostics said it learned on 21 October 2026 that there had been unauthorised access to its Quanum LSM system.
- The company said some patient records may have been exposed, but it had not yet identified which data types were affected.
- Quest said it filed the disclosure with the U.S. Securities and Exchange Commission, brought in external experts and notified law enforcement.
- The company said customer-facing operations were not disrupted, but it paused access to Essential Insights, LabHQ and the Quanum LSM system.
- BleepingComputer said it had not found any threat group claiming responsibility for the attack.
Quest Diagnostics Incorporated said it learned on 21 October 2026 of unauthorised access to its Quanum LSM system, which clients used to place test orders and review results. The company said it activated its incident response process and disclosed the matter to the U.S. Securities and Exchange Commission.
The company said it believed some patient records had been exposed, but it had not yet determined which data were affected. It said external experts were helping with the investigation and that it had informed law enforcement.
Quest said the incident had not disrupted its customer-facing operations, and that users of direct-customer LIS interfaces and EMRs were not affected. As a precaution, it paused access to other systems, including Essential Insights and LabHQ.
Quest said Quanum LSM had been stopped, and told customers to use paper requisitions or Quanum eLabs for orders and results. BleepingComputer said it had not found a group claiming the attack at the time of writing.
Named in this story
Companies
- Quest Diagnostics Incorporated
- disclosed the breach and filed with the SEC
Organisations
- BleepingComputer
- reported that no threat group had claimed the attack
Governments and agencies
- U.S. Securities and Exchange Commission
- received Quest Diagnostics’ filing
Products and systems
- Quanum LSM
- the system that was accessed without authorisation
- Essential Insights
- one of the systems Quest Diagnostics paused as a precaution
- LabHQ
- one of the systems Quest Diagnostics paused as a precaution
- Quanum eLabs
- the alternate system customers were told to use
How the source tells it
The main report was neutral and factual, but it ended with promotional vendor copy that shifted into boosterish marketing.
- vendor boosterism the closing copy used performance claims and a call to action for a named report