# Quest Diagnostics breach: patient records accessed via Quanum Lab Services Manager · pwn.watch > Quest Diagnostics says it learned on Oct 21 2026 of unauthorized access to its Quanum Lab Services Manager (LSM), the system some clients use to place lab test orders and receive and look up results. Quest believes some patient data in Quanum LSM was accessed and confirms PHI/PII was involved; the specific data affected is still being investigated. Quest paused access to Quanum LSM (and, as a precaution, Essential Insights and LabHQ, where no data was accessed), notified federal law enforcement and engaged outside experts. Core operations are not materially disrupted, and Quest says the incident is not related to the PHP vulnerabilities. Page: https://pwn.watch/i/quest-diagnostics-quanum-lsm-breach · generated 2026-10-23T03:29:04.267Z ## Status - Severity: high · status: live · patch: partial - Product: Quest Diagnostics Quanum Lab Services Manager (lab ordering and results portal) - Started: 2026-10-21 - Affected: Quanum Lab Services Manager (LSM) patient data; affected patients and providers not yet identified - Fixed in: Access to Quanum LSM paused and the unauthorized access discontinued; full restoration expected as soon as Oct 23 ## Follow this incident - RSS (one item per update): https://pwn.watch/i/quest-diagnostics-quanum-lsm-breach/feed.xml - JSON Feed: https://pwn.watch/i/quest-diagnostics-quanum-lsm-breach/feed.json - Full data (timeline, sources, posts, agentBrief): https://pwn.watch/i/quest-diagnostics-quanum-lsm-breach.json - This file: https://pwn.watch/i/quest-diagnostics-quanum-lsm-breach/llms.txt ## Updates (newest first) - 2026-10-22: 8-K filing: Quest believes an unauthorized party accessed certain patient records; federal law enforcement notified and outside experts engaged; operations not materially disrupted. (https://www.sec.gov/Archives/edgar/data/1022079/000094787126000941/ss6979200_8k.htm) - 2026-10-22: Quest FAQ confirms PHI/PII was involved, pauses Essential Insights and LabHQ as a precaution, says the incident is not PHP-related, and expects Quanum LSM back as soon as Oct 23. Clients can use paper requisitions or Quanum eLabs meanwhile. (https://www.questdiagnostics.com/links/quanum-notice) - 2026-10-21: Quest learns of unauthorized access to Quanum LSM, starts incident response and pauses access to the system. (https://www.sec.gov/Archives/edgar/data/1022079/000094787126000941/ss6979200_8k.htm) ## Fix brief # Security brief: Quest Diagnostics breach: patient records accessed via Quanum Lab Services Manager Source: https://pwn.watch/i/quest-diagnostics-quanum-lsm-breach · status: live · severity: high · updated Oct 23, 2026, 03:28 UTC ## Patch status **PARTIALLY PATCHED: some fixes exist, but not every affected branch/product is covered. Check carefully and apply mitigations where no fix exists.** ## What it is Quest Diagnostics says it learned on Oct 21 2026 of unauthorized access to its Quanum Lab Services Manager (LSM), the system some clients use to place lab test orders and receive and look up results. Quest believes some patient data in Quanum LSM was accessed and confirms PHI/PII was involved; the specific data affected is still being investigated. Quest paused access to Quanum LSM (and, as a precaution, Essential Insights and LabHQ, where no data was accessed), notified federal law enforcement and engaged outside experts. Core operations are not materially disrupted, and Quest says the incident is not related to the PHP vulnerabilities. Severity detail: Patient health and personal information accessed at a major US lab; scope still unknown - Product: Quest Diagnostics Quanum Lab Services Manager (lab ordering and results portal) ## Affected versions - Quanum Lab Services Manager (LSM) patient data; affected patients and providers not yet identified ## Check whether you're affected No generic command applies (the product is a hosted service, appliance or desktop app). Check the installed version in its admin UI / About screen and compare with the versions above. ## Fix Upgrade to one of these fixed versions (or later on the same branch): - Access to Quanum LSM paused and the unauthorized access discontinued; full restoration expected as soon as Oct 23 After upgrading, re-run the checks above and redeploy/restart the affected services. ## Mitigations The data marks this as partial. Until every affected component is fixed, apply the vendor mitigations from the advisories below (restrict network exposure of the affected service, disable the vulnerable feature if the advisory allows). ## Specific notes If you are a Quest patient or a provider using Quanum LSM: expect breach notifications later, watch for phishing that impersonates Quest or your lab results, and use paper requisitions or Quanum eLabs until LSM is restored. ## Latest updates - Oct 22, 2026: 8-K filing: Quest believes an unauthorized party accessed certain patient records; federal law enforcement notified and outside experts engaged; operations not materially disrupted. - Oct 22, 2026: Quest FAQ confirms PHI/PII was involved, pauses Essential Insights and LabHQ as a precaution, says the incident is not PHP-related, and expects Quanum LSM back as soon as Oct 23. Clients can use paper requisitions or Quanum eLabs meanwhile. - Oct 21, 2026: Quest learns of unauthorized access to Quanum LSM, starts incident response and pauses access to the system. ## Advisories - [An update on an incident involving one of our systems](https://www.questdiagnostics.com/links/quanum-notice) (Quest Diagnostics) - [Form 8-K, Item 8.01 (Quanum LSM unauthorized access)](https://www.sec.gov/Archives/edgar/data/1022079/000094787126000941/ss6979200_8k.htm) (U.S. SEC) ## Write-ups & news - [Quest Diagnostics hit by a cyber breach, with patient records likely accessed](https://apnews.com/article/quest-cyber-breach-82dbe1fa6ba06cf6514bc16f73e64fe1) - [Quest Diagnostics (Hacked)](https://news.ycombinator.com/item?id=50203449) ## Caveats How the attacker got in and how many patients are affected have not been disclosed. Quest says it will notify affected patients and providers as required by law. Providers ordering through LIS interfaces or EMRs were not affected. --- Machine-readable: https://pwn.watch/i/quest-diagnostics-quanum-lsm-breach.json · all incidents: https://pwn.watch/incidents.json. Verify against the vendor advisory before changing production systems.