Quest Diagnostics confirms data breach exposed patient records
Quest Diagnostics confirms patient records exposed after threat actor accessed Quanum LSM system.
Run Quest Diagnostics?
Get an email when a reviewed story names Quest Diagnostics, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
Quest Diagnostics has disclosed a data breach affecting its Quanum LSM system, which is used by clients to place test orders and receive results. The company learned of the unauthorized access on October 21, 2026, and has launched an incident response protocol. While the full scope is still under investigation, patient records are believed to have been exposed, though the specific data types are yet to be determined. The incident has not disrupted customer-facing operations, but access to other systems has been temporarily paused.
The lesson from this incident
Full lessonQuest Diagnostics suffered unauthorized access to its Quanum LSM system, a platform handling sensitive patient test orders and results, exposing an undetermined scope of patient health records. The breach highlights the critical risk of inadequate access controls and monitoring on systems that store protected health information (PHI). Healthcare organizations are high-value targets precisely because patient data commands a premium on the black market and carries heavy regulatory obligations. The temporary suspension of access to other systems suggests the attacker may have had broader lateral movement potential, underlining the importance of network segmentation and least-privilege access principles.
What helps against this
How we list vendors- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
- Cyber asset inventory
You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.
- Incident response retainer
Experts are on call before the worst day, not searched for during it.