Quest Diagnostics discloses unauthorized access to Quanum LSM, possible exposure of patient records
Quest Diagnostics disclosed in a Form 8-K that an unidentified party gained unauthorized access to its Quanum LSM (Lab Services Manager) system and may have accessed certain patient records. The company became aware of the incident on October 21, 2026. Quest paused access to the affected platform, activated incident response procedures, notified federal law enforcement and engaged external cybersecurity experts. The company states the incident has not materially disrupted business operations or its ability to serve patients.
Detalhes técnicos
- Quanum LSM is a provider-facing platform that lets certain healthcare clients place lab test orders, receive results and retrieve prior results.
- No threat actor, initial access technique or software vulnerability has been identified or disclosed.
- There is no indication of ransomware, an extortion demand or deployment of malicious software.
- The number of affected individuals, the data types involved and the duration of access have not been disclosed.
- It is not confirmed whether records were downloaded, exfiltrated, published or sold. Unauthorized access and confirmed data theft remain distinct findings.
- Providers that order tests through direct-customer laboratory information system interfaces or electronic medical records are unaffected. The confirmed operational impact is limited to the Quanum LSM platform.
Remediação
- Quest has suspended access to the affected system; no restoration timeline has been given.
- Healthcare clients should use the unaffected ordering channels (direct LIS interfaces or EMR integrations) in the meantime.
- Clients should watch for further Quest updates on scope, patient notifications and any protective services offered.
Linha do tempo
-
Quest Diagnostics discloses unauthorized access to Quanum LSM, possible exposure of patient records
ler a análise desta fonte ocultar
Quest Diagnostics disclosed in a Form 8-K that an unidentified party gained unauthorized access to its Quanum LSM (Lab Services Manager) system and may have accessed certain patient records. The company became aware of the incident on October 21, 2026. Quest paused access to the affected platform, activated incident response procedures, notified federal law enforcement and engaged external cybersecurity experts. The company states the incident has not materially disrupted business operations or its ability to serve patients.
Technical Details
- Quanum LSM is a provider-facing platform that lets certain healthcare clients place lab test orders, receive results and retrieve prior results.
- No threat actor, initial access technique or software vulnerability has been identified or disclosed.
- There is no indication of ransomware, an extortion demand or deployment of malicious software.
- The number of affected individuals, the data types involved and the duration of access have not been disclosed.
- It is not confirmed whether records were downloaded, exfiltrated, published or sold. Unauthorized access and confirmed data theft remain distinct findings.
- Providers that order tests through direct-customer laboratory information system interfaces or electronic medical records are unaffected. The confirmed operational impact is limited to the Quanum LSM platform.
Remediation
- Quest has suspended access to the affected system; no restoration timeline has been given.
- Healthcare clients should use the unaffected ordering channels (direct LIS interfaces or EMR integrations) in the meantime.
- Clients should watch for further Quest updates on scope, patient notifications and any protective services offered.