# Unauthorized Access Confirmed at Quest Diagnostics Lab Platform

Quest Diagnostics has disclosed that patient records were exposed after unauthorized access to its Quanum LSM system. The company discovered the breach on October 21 and filed notice with the Securities and Exchange Commission. Quanum LSM is an online platform used by physicians and hospital staff to place test orders and retrieve results. The company is investigating which data was accessed with the help of external experts and has notified law enforcement. Quest has temporarily stopped the system and advised clients to use alternative ordering methods.

## Discovery and Initial Response

Quest Diagnostics learned of the unauthorized access on October 21 and activated its incident response protocol to contain the activity, assess the scope and implement remedial measures. The company filed an 8-K report with the Securities and Exchange Commission disclosing the breach.

The intrusion affected the Quanum LSM system, which certain clients use to place test orders, receive and look up results. Quest is still investigating the incident but believes some patient records were exposed. External experts are assisting the investigation, and the company has informed law enforcement.


## Affected System and Its Use

Quanum Lab Services Manager is Quest's online platform that physicians, hospital personnel and medical office staff use to manage laboratory services. Users place test orders, access results, track specimen status and order supplies through the system.

Quest Diagnostics operates 7,700 points across North America, employs 65,000 people and generates more than 11 billion dollars in annual revenue. The company says it serves one in three U.S. adults each year.


## Systems Paused and Workarounds

Quest has stopped the Quanum LSM system while the investigation continues. As a cautionary measure, the company has also temporarily paused access to Essential Insights and LabHQ.

The company says the incident has not disrupted customer-facing operations and users of direct-customer laboratory information system interfaces or electronic medical records were not impacted. Customers are recommended to use paper requisitions or Quanum eLabs to place orders and receive results.


## Data Types Under Investigation

Quest has not yet determined the types of data that were exposed in the breach. The company disclosed that it believes some patient records were accessed but the investigation into which specific information was affected remains ongoing.

The full scope of exposed data will be clarified as the investigation progresses and as Quest completes its review of the compromised system.


## No Public Attribution

No threat group has claimed responsibility for the attack as of the disclosure date. The absence of a public claim does not indicate the nature of the intrusion or rule out future extortion attempts or data sales.

Healthcare breaches sometimes see delayed attribution as attackers negotiate privately or distribute stolen information on underground forums. Quest's prompt regulatory filing does not preclude the possibility that data could appear later.


## Prior Breach and Litigation

Quest Diagnostics experienced a previous significant exposure when data belonging to approximately 11.9 million patients was compromised through a breach at American Medical Collection Agency, a billing collection provider the company used. That incident occurred several years ago.

The earlier breach led to numerous legal challenges. Multiple class-action lawsuits were brought against Quest Diagnostics and later combined into a single consolidated action, which has not yet been resolved. The history of that incident may shape regulatory and patient scrutiny of the current breach response.


## What system was breached at Quest Diagnostics?

The Quanum LSM system was accessed without authorization. Quanum Lab Services Manager is an online platform that physicians, hospital personnel and medical office staff use to place test orders, receive and look up results, and manage laboratory services.

## What patient information was exposed in the breach?

Quest believes some patient records were exposed but has not yet determined the specific types of data affected. The investigation is ongoing with the help of external experts and law enforcement.

## Can healthcare providers still use Quanum LSM?

No. Quest has stopped the Quanum LSM system while the investigation continues. Customers are recommended to use paper requisitions or Quanum eLabs to place orders and receive results. Essential Insights and LabHQ have also been paused as a precaution.

## Has any group claimed responsibility for the attack?

No threat group has claimed the attack as of the disclosure date. This does not rule out future claims, private negotiation or data sales, as some attackers delay public attribution.

## What should patients do in response to this breach?

Wait for official notification from Quest once the investigation determines which records were accessed. Monitor health insurance statements for unexpected claims and watch for phishing attempts. Do not click links in unsolicited emails claiming to be breach notifications.

Source: BleepingComputer
Published: 2026-10-24T00:28:59+00:00