[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-FIyM6fMDp1-Pk_8wUfGYZEmbL_xehSKf15dmV2asdk":3},{"article":4,"iocs":41,"watch_terms":42,"solutions":43,"lesson":128},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"b5343c2b-42c2-4103-81a0-8a99b78151ae","Quest Diagnostics Reports Cyber Breach Affecting ‘Certain Patient Records’","quest-diagnostics-reports-cyber-breach-affecting-certain-patient-records-4a6ee4","In a regulatory filing, Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, a platform where certain clients can place test orders. The post Quest Diagnostics Reports Cyber Breach Affecting ‘Certain Patient Records’ appeared first on SecurityWeek.","Quest Diagnostics has reported a cyber breach involving unauthorized access to its Quanum Lab Services Manager platform. The company discovered the incident on Wednesday and is currently investigating the full scope, including how many patients and which specific records were affected. They are working with external cybersecurity experts and have notified federal law enforcement.","Quest Diagnostics reports cyber breach impacting certain patient records via Quanum Lab Services Manager.","https:\u002F\u002Fwww.securityweek.com\u002Fquest-diagnostics-reports-cyber-breach-affecting-certain-patient-records\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F07\u002Fdata-breach-healthcare-medical.jpg","2026-10-23T08:25:06+00:00","2026-10-23T10:00:05.074179+00:00",7,[17,20],{"name":18,"type":19},"Quanum Lab Services Manager","product",{"name":21,"type":22},"Quest Diagnostics","vendor","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":23,"icon":25,"name":26,"slug":27},null,"Breaches","breaches",[29,31,36],{"category":30},{"id":23,"icon":25,"name":26,"slug":27},{"category":32},{"id":33,"icon":25,"name":34,"slug":35},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",[],[21,18],{"controls":44,"vendors":127},[45,74,102],{"slug":46,"name":47,"problem":48,"products":49},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[50,58,66],{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-identity-protection","Falcon Identity Protection","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fnext-gen-identity-security\u002Fidentity-protection\u002F","Detection of identity attacks against Active Directory and Entra ID, with risk-based MFA.",{"slug":75,"name":76,"problem":77,"products":78},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[79,87,95],{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":97,"url":100,"description":101},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"slug":103,"name":104,"problem":105,"products":106},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[107,115,119],{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":111,"product_name":112,"url":113,"description":114},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","unit-42-retainer","Unit 42 Retainer","https:\u002F\u002Fwww.paloaltonetworks.com\u002Funit42\u002Fretainer","Incident response retainer with Unit 42, including preparation services.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":40,"product_name":116,"url":117,"description":118},"CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.",{"vendor_slug":120,"vendor_name":121,"vendor_logo":122,"product_slug":123,"product_name":124,"url":125,"description":126},"truesec","Truesec","\u002Fvendor-logos\u002Ftruesec.png","truesec-incident-response","Truesec Incident Response","https:\u002F\u002Fwww.truesec.com\u002Fservice\u002Fincident-response","Incident response team with a retainer option.",[],{"slug":129,"title":130,"body":131,"framework_refs":132,"framework_notes":140},"quest-diagnostics-platform-breach-exposes-patient-records","Quest Diagnostics Platform Breach Exposes Patient Records","Quest Diagnostics suffered unauthorized access to its Quanum Lab Services Manager platform, a system holding sensitive patient health records. The breach highlights the critical risk of inadequate access controls and monitoring around healthcare platforms that store protected health information (PHI). Unauthorized access to clinical systems can expose highly sensitive data including lab results, demographics, and insurance details — information that fuels identity theft and medical fraud. Healthcare organizations are high-value targets precisely because the data they hold is both sensitive and often inadequately protected behind legacy or third-party platforms.",[133,134,135,136,137,138,139],"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","CIS Control 17: Incident Response Management","NIST SP 800-53 SI-2: Flaw Remediation","GDPR Article 32","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","CIS Control 14: Security Awareness and Skills Training","MITRE ATT&CK T1566: Phishing",{"GDPR Article 32":141,"MITRE ATT&CK T1566: Phishing":142,"NIST SP 800-53 SI-2: Flaw Remediation":143,"CIS Control 17: Incident Response Management":144,"CIS Control 14: Security Awareness and Skills Training":145,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":146,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":147},"Article 32 requires appropriate technical and organisational measures to protect personal data; unauthorized access to patient records indicates those measures were insufficient and triggers mandatory breach notification obligations.","Unauthorized access to an enterprise clinical platform is commonly achieved through phishing-based credential compromise; understanding this technique informs defensive controls such as MFA enforcement and phishing-resistant email gateways.","If the breach originated from an unpatched vulnerability in the Quanum platform, regular flaw remediation processes would have reduced the attack surface available to the unauthorized actor.","Quest's post-breach response — engaging external experts and notifying law enforcement — reflects incident response steps that should be pre-planned; a mature IR plan would accelerate containment and reduce the window of exposure.","If the breach involved phishing or credential theft, inadequate security awareness among staff handling PHI platforms would be a contributing factor; ongoing training reduces the human-layer risk in healthcare environments.","This control requires organizations to identify, assess, and remediate technical vulnerabilities in a timely manner, which would help close any exploitable weaknesses in the Quanum platform before attackers could leverage them.","Unauthorized access to the Quanum platform suggests insufficient authentication controls; this framework item mandates that access to sensitive systems be tightly managed and authenticated to prevent exactly this type of intrusion."]