Medical lab testing giant Quest Diagnostics confirmed a cyberattack and data breach on October 23, 2026, compromising sensitive patient information stored on its systems, according to TechCrunch. The company filed an 8-K form with U.S. regulators detailing the incident.
Key takeaways
- Quest Diagnostics reported a cyberattack on its Quanum lab testing platform.
- The unauthorized access compromised certain patient records and personal information.
- The exact number of affected patients remains unspecified by the company.
- This event follows a series of major cyberattacks targeting the healthcare sector this year.
What caused the quest Diagnostics data breach?
The company learned of a cyberattack targeting its Quanum system, which allows doctors' offices, hospitals, and healthcare practices to request lab tests and handle billing. This platform stores a large volume of patient health and medical records, alongside associated diagnostic and billing data.
Quest spokesperson Amanda Rivera pointed to a security notice stating that some patients' protected health information was taken. The company did not disclose when the breach started or whether hackers made ransom demands.
Impact of the cyberattack on quest
Quanum is used by about half a million clinicians in thousands of locations across North America. Although the company has not yet said how many healthcare customers had information stolen, its website materials show that individual health systems with millions of patients can hold hundreds of millions of related medical documents.
The security notice from Quest currently contains noindex code, which prevents search engines from listing the page in search results. This incident marks the second known major data breach for the company in a decade, following a 2019 breach involving a third-party billing company that affected 11.9 million patient records.
Why this security incident matters
Health tech companies have become primary targets for financially motivated cybercriminals aiming to steal sensitive data and threaten publication if unpaid. This event highlights ongoing vulnerabilities in medical infrastructure, joining recent hacks at Stryker, Boston Scientific, CareCloud, Craneware, and McKesson that have disrupted operations and exposed millions of electronic health records throughout the year.
Frequently asked questions
The cyberattack targeted Quanum, a lab testing system used by hospitals, doctors' offices, and healthcare practices to handle test requests and billing.
Quest Diagnostics has not yet specified how many patients or healthcare customers had information stolen during the cyberattack.
Some patients' protected health information was taken, including personal information and patient records stored within the testing and billing systems.
Yes, this is the company's second known major data breach in a decade, following a 2019 cyberattack on a third-party billing company that affected 11.9 million patient records.
TechCrunch reported on the disclosure after Quest Diagnostics filed an 8-K document with the U.S. Securities and Exchange Commission.
Based on reporting by TechCrunch. Read the original article
