Quest Diagnostics Confirms Patient Records Exposed in Cyber Breach
Major American clinical laboratory company Quest Diagnostics has confirmed that patient records were exposed following unauthorized access to its online platform.
Radwan AbdulhadiEditor and technology writer
Unauthorized Access Discovered on Quanum LSM System
American clinical laboratory company Quest Diagnostics disclosed that patient records have been exposed after a threat actor gained unauthorized access to its Quanum LSM system. The company learned about the breach on October 21 and deployed its incident response protocol to contain the activity, assess and investigate the nature and scope of the incident, and implement appropriate remedial measures.
The company formally detailed the event in a filing, where it noted the unauthorized access to the platform used by certain clients to place test orders and receive results. External experts are aiding the ongoing investigation, and Quest Diagnostics has also informed the applicable law enforcement authorities.
Operations and System Impact
Quanum Lab Services Manager is the firm’s online platform that physicians, hospital personnel, and medical office staff use to manage laboratory services, access test results, track status, and order supplies. While the investigation remains ongoing, the types of data affected have yet to be determined.
Quest Diagnostics stated that the incident has not disrupted its customer-facing operations, and users of direct-customer LIS interfaces or EMRs were not impacted. As a cautionary measure, the company has temporarily paused access to other systems, including Essential Insights and LabHQ.
Currently, the Quanum LSM system has been completely stopped. Customers are recommended to use paper requisitions or Quanum eLabs to place orders and receive results while remediation efforts continue.
Company Background and Scale
Quest Diagnostics is a major clinical laboratory company in the United States, providing diagnostic testing and services for a wide range of medical conditions. The firm operates 7,700 points across North America, employs 65,000 people, and generates more than $11 billion in annual revenue. Furthermore, the company states that it serves one in three U.S. adults each year.
Prior Security Incidents and Industry Context
The latest disclosure brings renewed attention to previous cybersecurity challenges faced by health organizations. In 2019, data of about 11.9 million Quest Diagnostics patients was compromised in a breach at billing collection provider American Medical Collection Agency. Following that disclosure, at least 19 class-action lawsuits were filed against Quest Diagnostics, with consolidated cases remaining ongoing.
As of writing, security researchers could not find a threat group claiming the attack on Quest Diagnostics. The healthcare sector continues to face broad digital threats, with recent cyber incidents affecting various health networks and organizations across the industry.
Sources
- BleepingComputerQuest Diagnostics confirms data breach exposed patient records
Continue chronologically
Related stories
Quest Diagnostics Discloses Cyber Breach Affecting Patient Records
American clinical laboratory company Quest Diagnostics reports a cyber breach exposing patient records after unauthorized access to its Quanum LSM system.
Quest Diagnostics Confirms Patient Data Breach on Quanum
Medical lab testing giant Quest Diagnostics confirms a cyberattack and data breach compromising sensitive patient personal and health information.
CenterPoint Energy Data Breach Impacts Over 1 Million Texans
CenterPoint Energy confirms a data breach has impacted over 1 million Texas residents, compromising personal information such as Social Security numbers.
Anthropic Files S-1 Prospectus for Nasdaq IPO
Anthropic has filed its S-1 prospectus with the SEC to list on Nasdaq under the ticker ANT, detailing financials, risks, and compute deals.
