Quest Diagnostics Discloses Cyber Breach Affecting Patient Records
Major American clinical laboratory company Quest Diagnostics has reported a cyber breach affecting certain patient records after unauthorized access was detected on its Quanum LSM platform.
Radwan AbdulhadiEditor and technology writer
Discovery of the Unauthorized Access
American clinical laboratory company Quest Diagnostics disclosed that patient records have been exposed after a threat actor gained unauthorized access to its Quanum LSM system. According to details made public by BleepingComputer, the corporation learned about the unauthorized activity on October 21, 2026, prompting an immediate activation of internal cybersecurity incident response protocols.
The company explained that its incident response protocol was deployed to contain the unauthorized activity, assess and investigate the exact nature and scope of the security incident, and implement appropriate remedial measures. The corporate filing submitted to federal regulators further detailed the timeline and operational scope of the discovery.
As part of its formal regulatory disclosures, the company stated that on October 21, 2026, Quest Diagnostics Incorporated learned of unauthorized access to its Quanum LSM system, which certain clients use to place test orders, receive and look up results. Official documentation regarding this reporting was formally filed by the organization.
Background on Quest Diagnostics and Quanum LSM
Quest Diagnostics stands as a major clinical laboratory company in the United States, providing comprehensive diagnostic testing and medical services for a wide range of medical conditions, illnesses, and healthcare requirements. Operating extensively across the healthcare sector, the enterprise maintains significant infrastructure and an expansive operational footprint throughout North America.
To illustrate its scale, the firm operates 7,700 points across North America, employs 65,000 people, and generates more than $11 billion in annual revenue. Furthermore, the company notes that it serves approximately one in three U.S. adults each year, underscoring the vast volume of medical data and patient interactions managed by its technical networks.
The targeted technology, Quanum LSM, represents a critical component of the company's digital ecosystem. Physicians, hospital personnel, and medical office staff rely on this online platform to manage laboratory services, access test results, track status, and order supplies.
Investigation Status and Operational Impact
Following the identification of the incident, the organization moved quickly to secure its digital architecture and evaluate the potential fallout. The business published additional information and updates through its designated online portal to keep clients and healthcare providers informed.
The company is still actively investigating the incident but believes some patient records were exposed as a result of the unauthorized access. At this stage of the technical inquiry, the exact types of data affected have yet to be definitively determined.
To ensure a thorough and objective review, external cybersecurity experts are aiding the ongoing investigation. Additionally, Quest Diagnostics has formally informed the applicable law enforcement authorities to cooperate with any potential criminal or regulatory inquiries.
Remediation Steps and Alternative Workflows
Despite the scope of the unauthorized access, the enterprise confirmed that the incident has not disrupted its primary customer-facing operations. Furthermore, users relying on direct-customer LIS interfaces or electronic medical records (EMRs) were not impacted by the security event.
As a strict cautionary measure designed to limit any potential lateral movement or further exposure, Quest Diagnostics has temporarily paused access to other auxiliary systems, including Essential Insights and LabHQ.
At present, the Quanum LSM system has been completely stopped. Consequently, affected customers are recommended to use traditional paper requisitions or Quanum eLabs to place orders and receive necessary laboratory results while remediation continues.
Historical Context and Broader Landscape
The current security incident recalls past challenges faced by the organization regarding large-scale data security. In 2019, data of about 11.9 million Quest Diagnostics patients was compromised in a third-party breach at billing collection provider American Medical Collection Agency (AMCA).
In the wake of that historical compromise, at least 19 class-action lawsuits were filed against Quest Diagnostics and other involved entities. These legal actions were subsequently consolidated into multidistrict litigation, which remains ongoing and unresolved.
Regarding the latest October 2026 event, security researchers note that as of the time of writing, no specific threat group has publicly claimed responsibility or stepped forward to claim the attack on Quest Diagnostics.
Sources
- SecurityWeekQuest Diagnostics Reports Cyber Breach Affecting ‘Certain Patient Records’
- BleepingComputerQuest Diagnostics confirms data breach exposed patient records
Continue chronologically
Related stories
Quest Diagnostics Confirms Patient Records Exposed in Cyber Breach
American clinical laboratory giant Quest Diagnostics discloses a data breach affecting its Quanum LSM system, prompting a temporary system pause.
Quest Diagnostics Confirms Patient Data Breach on Quanum
Medical lab testing giant Quest Diagnostics confirms a cyberattack and data breach compromising sensitive patient personal and health information.
CenterPoint Energy Data Breach Impacts Over 1 Million Texans
CenterPoint Energy confirms a data breach has impacted over 1 million Texas residents, compromising personal information such as Social Security numbers.
Anthropic Files S-1 Prospectus for Nasdaq IPO
Anthropic has filed its S-1 prospectus with the SEC to list on Nasdaq under the ticker ANT, detailing financials, risks, and compute deals.
