Quest Diagnostics Confirms Data Breach, TechCrunch Reports

Quest Diagnostics Reports Quanum System Cyberattack and Patient Data Breach

Medical testing giant Quest Diagnostics confirmed a cyberattack and data breach affecting an unspecified amount of sensitive patient information stored in its systems, TechCrunch reported. The company disclosed the incident in an 8-K filing with the U.S. Securities and Exchange Commission, stating that it learned of unauthorized access targeting its Quanum platform on Wednesday.

The Quanum system allows hospitals, doctors’ offices, and healthcare practices to request diagnostic tests for patients while managing billing operations. Quest stated in its security notice that the unauthorized access included “certain patient records” and protected health information such as “personal information and patient records,” though the company is still investigating the specific scope of the data taken.

Quest Diagnostics Launches Internal Investigation into Data Breach

Quest Diagnostics notified law enforcement agencies upon discovering the breach and launched an internal investigation. Amanda Rivera, a spokesperson for Quest, did not answer TechCrunch’s questions regarding the specifics of the incident, instead referring inquiries to the company’s published security notice.

The company has not yet disclosed when the cyberattack began or whether any ransomware or extortion group has contacted the organization with demands for payment in exchange for withholding stolen data. The security notice posted on the company’s website currently contains “noindex” code to prevent search engines from listing the page in search results, making the public advisory significantly harder to locate for affected individuals.

Scale of Affected Quanum Infrastructure

Quest has not yet released figures detailing how many patients or healthcare customers had information compromised during the attack on Quanum. Company materials indicate that approximately half a million clinicians across thousands of North American locations use the platform.

While the exact volume of records stored within Quanum remains unpublicized, a 2026 case study published on Quest’s website demonstrates that a single health system with more than 6 million patients can generate and store hundreds of millions of associated medical charts and diagnostic documents.

Broader Healthcare Sector Cyber Incidents

The security breach at Quest Diagnostics is the latest major cyber incident targeting the healthcare and medical technology sector. Financially motivated cybercriminals have increasingly targeted health tech infrastructure to steal sensitive medical databases and demand ransoms under threat of publication.

Earlier this year, medical technology maker Stryker suffered a cyberattack that resulted in the mass-wiping of employee devices in March. In August, a cyberattack on medical implant manufacturer Boston Scientific forced its internal network offline for weeks and caused global operational disruptions. Additional major breaches occurred throughout the year at medical recordkeeping provider CareCloud, Scotland-based health tech firm Craneware, and pharmaceutical distributor McKesson.

This incident represents the second major known data breach for Quest Diagnostics in a decade. In 2019, the company lost 11.9 million patient records during a cyberattack that hit a third-party billing company.

Frequently Asked Questions About the Quest Diagnostics Breach

What systems were targeted in the Quest Diagnostics cyberattack?

The cyberattack specifically targeted Quanum, a platform utilized by hospitals and clinical practices across North America to request patient lab tests and handle medical billing data.

What specific data was accessed by unauthorized parties?

Quest confirmed that the unauthorized access impacted certain patient records and protected health information, though the company is still investigating the exact categories and total volume of data taken.

How can individuals contact reporters regarding this data breach?

Reporters covering the incident can be reached securely on Signal at the username zackwhittaker.1337 or by email.

More on Data Breach: Toronto Crime Stoppers Suspends Tips After Data Breach