Quest Diagnostics confirms patient data exposed in lab system breach
The US lab testing company says someone gained unauthorised access to its Quanum Lab Services Manager platform and that some patient health and personal data was accessed. Quest is still working out how many people are affected.
Quest Diagnostics said it first found the unauthorised access on 21 October and paused access to the platform. The company is based in Secaucus, New Jersey. It told investors about the incident in a filing on 22 October.
Quest said core business operations are not affected and that clients who do not use the platform should not see testing delays. It said it expects to restore full function of the platform as soon as Friday. It paused two other systems, Essential Insights and LabHQ, as a precaution, and said no data was accessed on them.
Quest said the incident is unlikely to match the scale of an earlier breach, because only certain customers use the affected system. That earlier breach, which ran from August 2018 to March 2019, exposed the health data of about 11.9 million patients. No threat group has claimed responsibility for the new incident.
Ross Filipek, chief information security officer at Corsica Technologies, said such records could give criminals material for identity fraud or convincing messages about someone's care.
Key facts
- Who
- Quest Diagnostics (lab testing company that confirmed the breach); Ross Filipek (CISO at Corsica Technologies)
- What
- Quest Diagnostics confirmed that patients' personal and health data was compromised during a breach. The description says Quest is the latest in a series of healthcare technology companies hacked in recent months.
- When
- 23 October 2026
- Where
- Secaucus, New Jersey, New Jersey
- Status
- Reported