Quest Diagnostics confirms unauthorized access to Quanum Lab Services Manager, exposing patient records
Quest Diagnostics confirmed that an unauthorized party accessed its Quanum Lab Services Manager (LSM), a platform healthcare providers use to order lab tests, view results, review historical trends and order supplies. The company learned of the access on October 21, paused access to the platform and opened an investigation. Quest says core business operations remain running.
Quest confirmed that health information and personally identifiable information were affected, but has not published a count of affected patients or a full list of data types. It has not said whether Social Security numbers, insurance identifiers, payment data, specific test results or account passwords were involved. Quest plans to notify affected patients, healthcare providers and health plans, with credit and identity monitoring offered.
Detalhes técnicos
- The attack vector, threat actor and method of access have not been disclosed.
- The investigation is ongoing.
Remediação
- Verify unexpected messages about the breach independently via Quest's official website.
- Review medical bills and insurance Explanation of Benefits statements for services not received.
- Review credit reports through AnnualCreditReport.com.
- Report suspected identity theft at IdentityTheft.gov and request corrections to medical records if needed.
Linha do tempo
-
Quest Diagnostics confirms unauthorized access to Quanum Lab Services Manager, exposing patient records
ler a análise desta fonte ocultar
Quest Diagnostics confirmed that an unauthorized party accessed its Quanum Lab Services Manager (LSM), a platform healthcare providers use to order lab tests, view results, review historical trends and order supplies. The company learned of the access on October 21, paused access to the platform and opened an investigation. Quest says core business operations remain running.
Quest confirmed that health information and personally identifiable information were affected, but has not published a count of affected patients or a full list of data types. It has not said whether Social Security numbers, insurance identifiers, payment data, specific test results or account passwords were involved. Quest plans to notify affected patients, healthcare providers and health plans, with credit and identity monitoring offered.
Technical Details
- The attack vector, threat actor and method of access have not been disclosed.
- The investigation is ongoing.
Remediation
- Verify unexpected messages about the breach independently via Quest's official website.
- Review medical bills and insurance Explanation of Benefits statements for services not received.
- Review credit reports through AnnualCreditReport.com.
- Report suspected identity theft at IdentityTheft.gov and request corrections to medical records if needed.