Quest Diagnostics confirms cyberattack exposed patient data
A security incident at a major US lab testing company has put sensitive medical records at risk, adding to a year of significant disruptions in the healthcare sector.
By Layla Edwards ·
The healthcare industry has faced persistent cybersecurity challenges throughout 2026, with major players experiencing significant operational disruptions and data losses. Amidst this backdrop, Quest Diagnostics, a leading provider of medical laboratory services in the United States, has officially confirmed that a recent cyberattack resulted in the unauthorized access to patient information.
The company disclosed the incident through an 8-K filing with the Securities and Exchange Commission, stating that the attack targeted its Quanum platform. This system is critical for healthcare providers, as it allows doctors and hospitals to request lab tests and manages associated billing processes. Quanum holds extensive records, including diagnostic data, medical history, and financial information for patients across North America.
Quest indicated that the breach involved the access of specific patient records and that the company has engaged law enforcement to investigate the matter. While the exact scale of the data compromised has not yet been determined, the platform is used by approximately 500,000 clinicians in thousands of locations. The potential impact is substantial, as a single health system connected to the platform can hold hundreds of millions of medical documents, suggesting the volume of exposed data could be vast.
This incident follows a string of high-profile cyberattacks in the medical technology sector this year. In March, medical equipment manufacturer Stryker suffered a ransomware attack that wiped employee devices. Later in August, Boston Scientific was forced to take its network offline for weeks due to a hack that caused global operational disruptions. Additionally, significant data breaches were reported at CareCloud, Craneware, and McKesson, highlighting a trend where financially motivated attackers target health tech firms for their valuable data.
The company has not yet clarified when the intrusion began or if the attackers have contacted Quest with ransom demands. A spokesperson for the company, Amanda Rivera, directed inquiries to a security notice posted on the company's website. This notice confirms that protected health information, including personal details and medical records, was taken. However, the specific types of data remain under investigation.
This marks the second major data breach for Quest in the last decade. In 2019, the company lost 11.9 million patient records following an attack on a third-party billing vendor. The current situation underscores the ongoing vulnerability of central health data hubs and the potential for widespread impact on patient privacy when these systems are compromised.
As the investigation continues, Quest is working to determine the full scope of the compromise. The lack of a specific count of affected patients or healthcare providers leaves the immediate impact uncertain, but the reliance of a large portion of the medical community on the Quanum system suggests that the repercussions could be far-reaching for both providers and patients.
Source: TechCrunch · original report published
