Emerging ThreatsData Breaches

Quest Diagnostics Breach Exposes Patient Records

Analyst 207||Source: BleepingComputer
Healthcare professional stands at computer workstation in medical office setting.
“On October 21, 2026, Quest Diagnostics Incorporated learned of unauthorized access to its Quanum LSM system, which certain clients use to place test orders, receive and look up results,” the company says in a filing with the U.S. Securities and Exchange Commission (SEC).

Unauthorized access to Quanum LSM

Quest Diagnostics disclosed that a threat actor gained unauthorized access to its Quanum LSM (Lab Services Manager) platform. Quanum LSM is the company’s online portal used by physicians, hospital personnel, and medical office staff to manage laboratory services, access test results, track status, and order supplies. The company said it first learned of the incident on October 21, 2026 and believes some patient records were exposed, although the specific types of data affected had not been determined at the time of the disclosure.

Quest Diagnostics' immediate response and investigation

Upon learning of the activity, Quest deployed its incident response protocol “to contain the activity, assess and investigate the nature and scope of the incident and implement appropriate remedial measures,” according to the SEC filing and a company alert posted on its website. External experts are assisting the ongoing investigation, and Quest has informed applicable law enforcement authorities. As of the company’s disclosure, the investigation was continuing and the company had not yet determined the full nature or scope of the exposed records.

Operational impact and customer guidance

Quest reported that the incident had not disrupted its customer-facing operations more broadly, and specifically noted that users of direct-customer laboratory information system (LIS) interfaces or electronic medical records (EMRs) were not impacted. The company temporarily stopped the Quanum LSM system and, as a precautionary measure, paused access to other systems including Essential Insights and LabHQ.

To keep clinical workflows moving, Quest recommended that customers use paper requisitions or its Quanum eLabs platform to place orders and receive results while the investigation continues.

Historical context: 2019 AMCA breach and ongoing litigation

The company’s disclosure drew immediate attention because of a prior, large-scale incident. In 2019, data of about 11.9 million Quest Diagnostics patients was compromised in a breach at billing collection provider American Medical Collection Agency (AMCA). In the wake of that earlier event, at least 19 class-action lawsuits were filed against Quest Diagnostics; those cases were consolidated into multidistrict litigation that remains ongoing and unresolved.

What this means for clinicians, patients, and security teams

  • Clinicians and medical office staff: Quest’s recommendation to use paper requisitions or Quanum eLabs creates immediate operational choices for ordering and receiving results. Providers who rely on Quanum LSM for ordering and result lookups were directly affected and must follow the temporary guidance while the system is offline.
  • Patients and the public: Quest stated it believes some patient records were exposed, but the company had not determined which types of patient data were affected. Given the uncertainty, patients and organizations that receive communications from Quest should expect follow-up notices as the investigation proceeds.
  • Security teams and technologists: Quest engaged external experts and notified law enforcement; the company also paused related systems. The incident highlights a known forensic reality the company cited: “Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.” Quest pointed to The Blue Report 2026, which measures defenses technique by technique across 338 million simulations run in customer production environments.

BleepingComputer reported that, as of its coverage, it could not find a threat group claiming the attack on Quest Diagnostics.

Quest Diagnostics is a major clinical laboratory provider in North America: it operates 7,700 service points, employs 65,000 people, and generates more than $11 billion in annual revenue. The company says it serves one in three U.S. adults each year—context that underlines the potential scale of any patient-impacting event tied to its systems.

The investigation’s immediate milestones are clear and limited: forensic completion to define which data were exposed, restoration and hardening of the affected systems, and any required notifications to impacted individuals and regulators. Beyond that, the company faces the longer-term legal and regulatory follow-through that followed the 2019 AMCA breach—litigation that remains unresolved—and the practical task of restoring full, trusted access to Quanum LSM and the paused services.

Original reporting: BleepingComputer — Quest Diagnostics confirms data breach exposed patient records

Data ExposureEmerging ThreatsHealthcareSupply ChainUS Securities And Exchange CommissionPatient Data BreachQuanum LSMQuest Diagnostics
Related Intelligence

Continue Reading

Bank lobby with customers, ATM, and cityscape reflection on polished floor.

Banks Face AI-Driven Credential Abuse

Banks are in a high-stakes battle against AI-driven credential abuse, where irresponsible individuals are handing over sensitive banking credentials to AI software, putting customer accounts at risk. To combat this, major US banks are scrambling to distinguish between legitimate customer activity and autonomous agents operating with valid credentials.

Analyst 207
Rows of computer servers and networking equipment in a brightly-lit network operations center.

Hackers Exploit Firewalls, VPNs to Expose 70,000 Credentials

A massive data breach has exposed over 70,000 credentials, thanks to a large-scale campaign that targeted vulnerable firewalls and VPN appliances, allowing hackers to steal sensitive information. The culprit behind this cyberattack is a threat actor known as k0t, who's been linked to notorious ransomware groups.

Analyst 207
Healthcare professional stands by computer terminal in medical lab setting with patient file in background.

Quest Diagnostics Breach Exposes Patient Records to Risk

A recent cyber breach at Quest Diagnostics has put patient records at risk, with hackers gaining unauthorized access to the company's Quanum LSM system, used for ordering tests and receiving results. This breach is particularly concerning, as it sits at the intersection of sensitive patient information and everyday lab work.

Analyst 207
A Ukrainian office setting with computers and equipment, featuring a laptop screen on a desk in the foreground.

Russian Hackers Deploy Novel Backdoor in Ukraine Attack

ESET researchers have uncovered a groundbreaking case of a novel backdoor, MythicRatatoskr, used by Russian hackers in a Ukraine attack, which may indicate a new trend in stealthy cyber threats. This sophisticated backdoor leverages a peer-to-peer network to evade detection.

Analyst 207