500,000: The number of clinicians using Quest's targeted system
Quest Diagnostics confirmed that a cyberattack exposed sensitive patient data on its Quanum platform, which serves roughly half a million medical professionals across North America.
By Lorenzo Marshall ·
A major medical lab testing company has confirmed that hackers accessed a system containing sensitive patient information. This development marks the latest significant security incident in a healthcare sector that has faced continuous digital threats throughout the year.
Quest Diagnostics filed a report with the U.S. Securities and Exchange Commission on Thursday. The company stated that it discovered the cyberattack on Wednesday. The breach targeted Quanum, a specific lab testing system. This platform allows doctors, hospitals, and other healthcare practices to request tests for their patients. It also manages the associated billing processes. The system stores a large volume of medical records, diagnostic data, and billing details. Quest noted that unauthorized individuals accessed certain patient records. The company has notified law enforcement and is currently conducting an investigation.
Healthcare organizations have become primary targets for financially motivated cybercriminals. These attackers often aim to steal as much sensitive data as possible. They then threaten to publish the information if a ransom is not paid. This year has seen a series of disruptive incidents in the sector. In March, a cyberattack caused the mass wiping of employee devices at medical technology maker Stryker. In August, a hack on implant manufacturer Boston Scientific forced its network offline for weeks. This caused global disruption to its operations. Other major data breaches affected medical recordkeeping firm CareCloud, health tech provider Craneware, and pharmaceutical distributor McKesson.
Quest has not yet specified how many healthcare customers or patients had their information stolen during the attack on Quanum. However, the company's marketing materials indicate that the platform is used by about 500,000 clinicians. These users are located in thousands of facilities across North America. While the total number of records held is unclear, a case study from 2026 on the company's website provides context. It notes that a single health system with more than 6 million patients can hold hundreds of millions of related medical documents.
The company did not disclose when the breach began. It also did not say if any hacking group has contacted Quest with demands for payment. Amanda Rivera, a spokesperson for the company, did not answer specific questions about the incident. She referred to the security notice posted on the company's website. That notice confirms that some protected health information, including personal details and patient records, was taken. The company is still investigating the specific types of data involved. Interestingly, the webpage currently contains code that tells search engines not to list the page in results.
This is the second known major data breach for Quest in the last decade. In 2019, the company lost 11.9 million patient records after a cyberattack on a third-party billing company. The investigation into the current incident is ongoing. The company has not provided a timeline for when it will release further details regarding the scope of the compromised data.
The healthcare industry continues to grapple with the fallout from these frequent cyber incidents. Patients and providers are left waiting for clarity on how much personal information was exposed. The focus remains on how these digital attacks impact the trust between medical providers and their clients.
