Quest Laboratories Cyber Attack

One of America’s largest medical testing companies is investigating a cybersecurity incident.

Quest Diagnostics disclosed on Wednesday, October 21, 2026, that it discovered unauthorized access to its Quanum Lab Services Manager (LSM) platform, a web-based system used by healthcare providers to order lab tests and view patient results. Quest believes an unauthorized party accessed certain patient records and immediately launched its incident-response process.

This is the platform used by healthcare providers around the country to order tests and review patient results. Quest says some patient records may have been accessed, but the company is still determining the scope of the breach. So far, no attacker has claimed responsibility, and officials say core testing operations remain online while the investigation continues.”

Why It Matters
This isn’t just an internal IT system. Quest serves roughly one in three U.S. adults and about half of U.S. physicians and hospitals, making it one of the largest diagnostic testing providers in America. Quanum LSM is used by physicians, hospitals, and medical offices to:

• Order laboratory tests
• View lab results
• Track testing status
• Manage laboratory services

Because the platform contains patient information, the incident raises concerns about exposure of protected health information (PHI) and personally identifiable information (PII).

What We Know So Far
Quest has confirmed:

• Unauthorized access occurred.
• Some patient data may have been accessed.
• Federal law enforcement was notified.
• External cybersecurity experts were engaged.
• The full scope of the breach is still under investigation.

What We Don’t Know Yet
As of the latest public disclosures, Quest has not yet said:

• How many patients were affected.
• Exactly what information was accessed.
• How the attackers got in.
• Whether data was stolen, copied, or publicly released.
• Which threat actor, if any, was responsible.

Operational Impact
Quest temporarily shut down access to Quanum LSM and paused a few related systems as a precaution. However, the company stated that its core laboratory operations continued to function and that direct laboratory and electronic medical record integrations were not affected. Quest subsequently reported that the system had been restored after remediation efforts.

Healthcare remains one of the most heavily targeted industries for cybercriminals because:

• Medical records are highly valuable.
• Healthcare organizations often have vast interconnected systems.
• Disruptions can directly impact patient care. [fiercebiotech.com], [yahoo.com]

This attack comes 7 years after a major 2019 incident involving a Quest vendor that affected approximately 11.9 million patients, highlighting how healthcare organizations continue to face significant cybersecurity challenges.

This is a developing story worth watching because the number of affected patients could range from relatively small to potentially very large depending on what investigators ultimately find.

Quest is deeply embedded in U.S. healthcare. If a cyberattack affects a system tied to an organization that serves one-third of American adults and half of U.S. doctors and hospitals, the potential reach could be substantial even if only a fraction of records were exposed

Thanks to BleepingComputer for bringing this incident to our attention.