Quest Diagnostics Confirms Patient Data Breach on Quanum
Medical testing giant Quest Diagnostics has disclosed a cyberattack and data breach affecting its Quanum platform, compromising sensitive patient personal and health information.
Radwan AbdulhadiEditor and technology writer
Cyberattack Targets Quanum Lab System
Medical lab testing giant Quest Diagnostics has confirmed a cyberattack and data breach that compromised an unspecified amount of sensitive patient information stored on its systems, according to an 8-K filing submitted to U.S. regulators.
The company stated that it learned of the cyberattack targeting one of its primary lab testing systems, Quanum. The platform is widely utilized by doctors' offices, hospitals, and healthcare practices to request diagnostic lab tests for patients while simultaneously managing associated billing operations.
Quanum stores large volumes of patient health records, medical documentation, and diagnostic data. Quest confirmed that the unauthorized access included 'certain patient records,' prompting the company to notify law enforcement and launch an active internal investigation.
Scope of the Breach and Patient Impact
While Quest Diagnostics has not yet disclosed the exact number of healthcare customers or individual patients whose information was stolen, the reach of the platform is expansive. According to corporate website materials, Quanum is utilized by approximately half a million clinicians across thousands of locations in North America.
The exact volume of health records held within the system remains undetermined, but a 2026 case study published on the Quest website illustrates that a single health system with over six million patients can generate hundreds of millions of related medical charts and documents.
Quest did not specify when the security breach initially began, nor did it state whether any threat actor or hacking group has reached out with ransom demands or threats to publish the stolen data.
Company Response and Public Notice
Amanda Rivera, a spokesperson for Quest, did not answer specific media inquiries regarding the incident and directed inquiries toward the official security notice issued by the company.
In the security notice, Quest acknowledged that some patients' protected health information—including personal details and patient records—was taken during the breach. However, the company noted that it is still investigating the precise categories and scope of data compromised.
Observers noted that the web page publishing the notice currently contains 'noindex' code designed to instruct search engines to exclude the page from public search results, complicating efforts for affected individuals to easily find the disclosure.
Broader Healthcare Sector Vulnerabilities
The incident at Quest Diagnostics represents the latest major security event impacting the broader healthcare technology industry, which has faced a continuous wave of cyberattacks and data breaches over recent months.
Financially motivated cybercriminals have increasingly targeted health tech companies to steal sensitive medical databases, often threatening to leak the stolen records unless substantial ransoms are paid.
Recent months have seen numerous high-profile disruptions across the sector, including the mass-wiping of employee devices at Stryker and operational paralysis at Boston Scientific.
Additional major breaches throughout the year have affected other critical medical and pharmaceutical infrastructure providers, including CareCloud, Craneware, and McKesson, exposing millions of patient electronic health records.
Historical Context and Prior Breaches
This cyberattack marks the second known major data breach experienced by Quest Diagnostics within the past decade. In 2019, the lab-testing giant suffered a massive security incident involving a third-party billing vendor that resulted in the exposure of 11.9 million patient records.
As investigations into the Quanum platform breach continue, federal regulators and security researchers are monitoring the situation to determine the full extent of the compromised patient information and the identity of the perpetrators.
Sources
- TechCrunchLab testing giant Quest Diagnostics confirms patients’ personal and health data was compromised during breach
Continue chronologically
Related stories
Quest Diagnostics Discloses Cyber Breach Affecting Patient Records
American clinical laboratory company Quest Diagnostics reports a cyber breach exposing patient records after unauthorized access to its Quanum LSM system.
Quest Diagnostics Confirms Patient Records Exposed in Cyber Breach
American clinical laboratory giant Quest Diagnostics discloses a data breach affecting its Quanum LSM system, prompting a temporary system pause.
Amazon and Microsoft Drop Data Center NDAs
Amazon follows Microsoft's lead to stop using NDAs in local government negotiations over data centers amid growing community pushback.
Petra Power Modernizes Energy for Data Centers and Defense
Founded in 2017, startup Petra Power is developing solid oxide fuel cells to modernize energy efficiency for data centers and defense vehicles.
