Quest Diagnostics discloses unauthorized access to Quantum Lab Services Manager system, patient records likely compromised
Quest Diagnostics, a Fortune 500 diagnostic testing company based in Secaucus, New Jersey, told the SEC in a Form 8-K filed on October 22, 2026 that it detected unauthorized access to its Quantum Lab Services Manager (LSM) system on October 21, 2026. The company suspects patient records were compromised, but the scale of the breach has not been determined. No threat group has claimed responsibility. The incident appears limited to LSM, which certain clients use to place test orders and receive and look up results. Quest says patient services and business operations were not affected.
Detalhes técnicos
- The intrusion was first identified on October 21, 2026. The initial access vector and the attacker's methods have not been disclosed.
- The affected system is the LSM platform, used only by certain clients. This limits the likely scope compared with the earlier AMCA breach, which exposed about 11.9 million patients' data between August 2018 and March 2019.
- Quest has not stated which data types were accessed. Test orders and results suggest protected health information, but the article does not confirm this.
Remediação
- Quest started its incident response protocol, applied remedial measures to prevent further unauthorized access, and temporarily paused access to LSM.
- Third-party cybersecurity experts were engaged and federal law enforcement was notified.
- Customers can continue to place orders and receive results by fax, paper, or direct-customer LIS interfaces or EMRs.
- Quest will publish further details as the investigation progresses.
Linha do tempo
-
Quest Diagnostics discloses unauthorized access to Quantum Lab Services Manager system, patient records likely compromised
ler a análise desta fonte ocultar
Quest Diagnostics, a Fortune 500 diagnostic testing company based in Secaucus, New Jersey, told the SEC in a Form 8-K filed on October 22, 2026 that it detected unauthorized access to its Quantum Lab Services Manager (LSM) system on October 21, 2026. The company suspects patient records were compromised, but the scale of the breach has not been determined. No threat group has claimed responsibility. The incident appears limited to LSM, which certain clients use to place test orders and receive and look up results. Quest says patient services and business operations were not affected.
Technical Details
- The intrusion was first identified on October 21, 2026. The initial access vector and the attacker's methods have not been disclosed.
- The affected system is the LSM platform, used only by certain clients. This limits the likely scope compared with the earlier AMCA breach, which exposed about 11.9 million patients' data between August 2018 and March 2019.
- Quest has not stated which data types were accessed. Test orders and results suggest protected health information, but the article does not confirm this.
Remediation
- Quest started its incident response protocol, applied remedial measures to prevent further unauthorized access, and temporarily paused access to LSM.
- Third-party cybersecurity experts were engaged and federal law enforcement was notified.
- Customers can continue to place orders and receive results by fax, paper, or direct-customer LIS interfaces or EMRs.
- Quest will publish further details as the investigation progresses.