Overview
Nationwide lab testing company Quest Diagnostics said one of its key systems may have experienced a breach of patient data. The company took its Quanum Lab Services Manager (LSM), which customers use to place test orders and look up results, offline on Thursday, October 22, 2026 after discovering unauthorized access.
What We Know
| Item | Detail |
|---|---|
| System | Quanum Lab Services Manager (LSM) |
| Discovered | October 22, 2026 |
| Data | Quest believes some patient data was accessed; the scope is still under investigation |
| People affected | Not disclosed |
| Attribution | No group had claimed responsibility as of Thursday afternoon |
Quest paused access to the system and several other systems as a precaution, reports no impact on the rest of the company, and is working with law enforcement. Customers can use paper requisitions in the meantime, and Quest aims to restore the system by Friday.
Quest says the incident did not involve the recent PHP vulnerabilities. A spokesperson declined to describe the nature of the incident.
Guidance
- Healthcare providers using Quest: Confirm paper requisition workflows, and watch for Quest notifications about affected patients.
- Patients: Watch for phishing that references lab tests or results, and review explanation-of-benefits statements.
- Security teams: Treat the vendor connection as a risk: review accounts and API credentials integrated with the Quanum platform.
This story is developing and details may change as the investigation continues.