Back to Feed
BreachesOct 23, 2026

Quest Diagnostics confirms data breach exposed patient records

Quest Diagnostics confirms patient records exposed after threat actor accessed Quanum LSM system.

Vendor Watch

Run Quest Diagnostics?

Get an email when a reviewed story names Quest Diagnostics, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy

Summary

Quest Diagnostics has disclosed a data breach affecting its Quanum LSM system, which is used by clients to place test orders and receive results. The company learned of the unauthorized access on October 21, 2026, and has launched an incident response protocol. While the full scope is still under investigation, patient records are believed to have been exposed, though the specific data types are yet to be determined. The incident has not disrupted customer-facing operations, but access to other systems has been temporarily paused.

The lesson from this incident

Full lesson

Quest Diagnostics suffered unauthorized access to its Quanum LSM system, a platform handling sensitive patient test orders and results, exposing an undetermined scope of patient health records. The breach highlights the critical risk of inadequate access controls and monitoring on systems that store protected health information (PHI). Healthcare organizations are high-value targets precisely because patient data commands a premium on the black market and carries heavy regulatory obligations. The temporary suspension of access to other systems suggests the attacker may have had broader lateral movement potential, underlining the importance of network segmentation and least-privilege access principles.

What helps against this

How we list vendors

Entities

Quanum LSM (product)Quest Diagnostics (vendor)