Quest Diagnostics Reports Cyberattack on Client-Facing Lab System, Compromising Patient Data
Quest Diagnostics disclosed a cyber incident affecting its Quanum LSM system, used by healthcare providers, which likely resulted in unauthorized access to certain patient records.
Medical testing giant Quest Diagnostics has alerted the U.S. Securities and Exchange Commission (SEC) to a cyber incident impacting its Quanum Lab Services Manager (LSM) system. This critical platform is utilized by healthcare providers for ordering laboratory tests and accessing patient results. While the full scope of the breach is still under investigation, the company stated that an unauthorized party gained access to "certain patient records."
Quest Diagnostics emphasized that the incident has not materially disrupted its business operations or its ability to serve patients. However, as a precautionary measure, the company has temporarily suspended access to the Quanum LSM system while its cybersecurity teams work to investigate and remediate the situation. Providers using direct-customer Laboratory Information System (LIS) interfaces or Electronic Medical Records (EMRs) for ordering tests from Quest Diagnostics can continue to do so, as these systems were not affected.
Security experts suggest that the nature of the attack, targeting a client-facing portal containing sensitive patient data without causing operational disruption, points towards data theft and potential extortion rather than a traditional ransomware attack. "The attackers went after a client-facing portal where test orders and results live, accessed patient records and didn't disrupt operations. That looks a lot more like data theft and extortion than traditional ransomware," noted Jason Vest, chief technology officer at Binary Defense.
Upon discovering the compromise, Quest Diagnostics immediately activated its cybersecurity incident response protocols. These procedures are designed to contain the malicious activity, thoroughly assess the nature and scope of the incident, and implement necessary corrective actions. The company has also notified federal law enforcement agencies about the breach.
This incident marks the latest in a series of cyberattacks targeting the healthcare sector, particularly medical testing laboratories. Recently, Abbott Laboratories disclosed a cyber incident affecting its Exact Sciences cancer testing unit, with multiple cybercrime groups claiming responsibility for data theft. These labs hold a wealth of high-value personal information, including names, dates of birth, contact details, insurance information, and sensitive test results, making them attractive targets for cybercriminals.
Beyond the direct theft of personal health information, compromised lab portals can also yield valuable credentials for physicians, clinics, and patients. Attackers can leverage these usernames and passwords to gain access to other systems, further expanding their attack surface. The value of this data for extortion purposes can persist long after the initial breach.
Quest Diagnostics has stated its commitment to the full restoration of its affected systems as swiftly as possible. The company is working to ensure the integrity and security of its platforms while continuing to provide essential diagnostic services to its clients and patients. Further updates are expected as the investigation progresses.
The company, which reported revenues of nearly $11.04 billion in 2025, is now facing the challenge of rebuilding trust with its clients and patients while strengthening its defenses against future cyber threats.