{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-23T03:43:20.679Z",
  "tag": {
    "id": "quest-diagnostics",
    "label": "Quest Diagnostics",
    "isStack": false,
    "url": "https://pwn.watch/t/quest-diagnostics",
    "feed": "https://pwn.watch/t/quest-diagnostics/feed.xml"
  },
  "counts": {
    "incidents": 1,
    "live": 1,
    "notFullyPatched": 1,
    "patched": 0
  },
  "incidents": [
    {
      "slug": "quest-diagnostics-quanum-lsm-breach",
      "title": "Quest Diagnostics breach: patient records accessed via Quanum Lab Services Manager",
      "url": "https://pwn.watch/i/quest-diagnostics-quanum-lsm-breach",
      "json": "https://pwn.watch/i/quest-diagnostics-quanum-lsm-breach.json",
      "status": "live",
      "severity": "high",
      "patchStatus": "partial",
      "product": "Quest Diagnostics Quanum Lab Services Manager (lab ordering and results portal)",
      "tags": [
        "quest-diagnostics",
        "healthcare",
        "data-breach"
      ],
      "cveIds": [],
      "affectedVersions": [
        "Quanum Lab Services Manager (LSM) patient data; affected patients and providers not yet identified"
      ],
      "fixedVersions": [
        "Access to Quanum LSM paused and the unauthorized access discontinued; full restoration expected as soon as Oct 23"
      ],
      "startedAt": "2026-10-21",
      "closedAt": null,
      "updatedAt": "2026-10-23T03:42:33Z",
      "summary": "Quest Diagnostics says it learned on Oct 21 2026 of unauthorized access to its Quanum Lab Services Manager (LSM), the system some clients use to place lab test orders and receive and look up results. Quest believes some patient data in Quanum LSM was accessed and confirms PHI/PII was involved; the specific data affected is still being investigated. Quest paused access to Quanum LSM (and, as a precaution, Essential Insights and LabHQ, where no data was accessed), notified federal law enforcement and engaged outside experts. Core operations are not materially disrupted, and Quest says the incident is not related to the PHP vulnerabilities.",
      "xPost": {
        "id": "2113446811151356228",
        "postedAt": "2026-10-23T01:46:00.682Z",
        "url": "https://x.com/pwnwatch_app/status/2113446811151356228"
      }
    }
  ],
  "posts": [
    {
      "authorName": "FOX Business",
      "handle": "FoxBusiness",
      "avatarUrl": "https://pbs.twimg.com/profile_images/1988464557983940608/sm7TY2SM_bigger.jpg",
      "text": "Quest Diagnostics confirms patient information accessed in cyberattack, systems temporarily shut down https://t.co/exvlCOF4u1",
      "date": "2026-10-22T23:00:23.000Z",
      "url": "https://x.com/FoxBusiness/status/2113405133467910216",
      "media": [],
      "incident": "quest-diagnostics-quanum-lsm-breach"
    },
    {
      "authorName": "Reuters Legal",
      "handle": "ReutersLegal",
      "avatarUrl": "https://pbs.twimg.com/profile_images/1880342703323389952/JfE-9dxP_bigger.jpg",
      "text": "Quest Diagnostics on Thursday said it learned of unauthorized access to its Quanum LSM system, which some clients use to place test orders, receive and look up results. https://t.co/tvqxrMZHmo",
      "date": "2026-10-22T12:00:38.000Z",
      "url": "https://x.com/ReutersLegal/status/2113239100698354157",
      "media": [],
      "incident": "quest-diagnostics-quanum-lsm-breach"
    }
  ],
  "changes": [
    {
      "incident": "quest-diagnostics-quanum-lsm-breach",
      "incidentTitle": "Quest Diagnostics breach: patient records accessed via Quanum Lab Services Manager",
      "severity": "high",
      "status": "live",
      "patchStatus": "partial",
      "date": "2026-10-22",
      "title": "8-K filing: Quest believes an unauthorized party accessed certain patient records; federal law enforcement notified and outside experts engaged; operations not materially disrupted.",
      "body": null,
      "sourceUrl": "https://www.sec.gov/Archives/edgar/data/1022079/000094787126000941/ss6979200_8k.htm",
      "url": "https://pwn.watch/i/quest-diagnostics-quanum-lsm-breach"
    },
    {
      "incident": "quest-diagnostics-quanum-lsm-breach",
      "incidentTitle": "Quest Diagnostics breach: patient records accessed via Quanum Lab Services Manager",
      "severity": "high",
      "status": "live",
      "patchStatus": "partial",
      "date": "2026-10-22",
      "title": "Quest FAQ confirms PHI/PII was involved, pauses Essential Insights and LabHQ as a precaution, says the incident is not PHP-related, and expects Quanum LSM back as soon as Oct 23. Clients can use paper requisitions or Quanum eLabs meanwhile.",
      "body": null,
      "sourceUrl": "https://www.questdiagnostics.com/links/quanum-notice",
      "url": "https://pwn.watch/i/quest-diagnostics-quanum-lsm-breach"
    },
    {
      "incident": "quest-diagnostics-quanum-lsm-breach",
      "incidentTitle": "Quest Diagnostics breach: patient records accessed via Quanum Lab Services Manager",
      "severity": "high",
      "status": "live",
      "patchStatus": "partial",
      "date": "2026-10-21",
      "title": "Quest learns of unauthorized access to Quanum LSM, starts incident response and pauses access to the system.",
      "body": null,
      "sourceUrl": "https://www.sec.gov/Archives/edgar/data/1022079/000094787126000941/ss6979200_8k.htm",
      "url": "https://pwn.watch/i/quest-diagnostics-quanum-lsm-breach"
    }
  ]
}
