[high] Quest Diagnostics breach: patient records accessed via Quanum Lab Services Manager

Fri, 23 Oct 2026 03:42:33 GMT

Quest Diagnostics says it learned on Oct 21 2026 of unauthorized access to its Quanum Lab Services Manager (LSM), the system some clients use to place lab test orders and receive and look up results. Quest believes some patient data in Quanum LSM was accessed and confirms PHI/PII was involved; the specific data affected is still being investigated. Quest paused access to Quanum LSM (and, as a precaution, Essential Insights and LabHQ, where no data was accessed), notified federal law enforcement and engaged outside experts. Core operations are not materially disrupted, and Quest says the incident is not related to the PHP vulnerabilities.

Status: live · Patch: partial · Fixed in: Access to Quanum LSM paused and the unauthorized access discontinued; full restoration expected as soon as Oct 23

Latest updates:

2026-10-22: 8-K filing: Quest believes an unauthorized party accessed certain patient records; federal law enforcement notified and outside experts engaged; operations not materially disrupted. (source)
2026-10-22: Quest FAQ confirms PHI/PII was involved, pauses Essential Insights and LabHQ as a precaution, says the incident is not PHP-related, and expects Quanum LSM back as soon as Oct 23. Clients can use paper requisitions or Quanum eLabs meanwhile. (source)
2026-10-21: Quest learns of unauthorized access to Quanum LSM, starts incident response and pauses access to the system. (source)

pwn.watch: Quest Diagnostics incident updates

[high] Quest Diagnostics breach: patient records accessed via Quanum Lab Services Manager