Quest Diagnostics, one of the largest medical testing providers in the United States, is investigating a cybersecurity breach that potentially exposed sensitive patient information. The company confirmed that an unauthorized party accessed an internal laboratory management platform, potentially compromising medical records and personal details of an unknown number of individuals.
The New Jersey-based company discovered the intrusion on October 21, 2026, after detecting unauthorized access to its Quanum Lab Services Manager (LSM) system. The platform is used by healthcare providers to order laboratory tests, receive results, and review patient information.
Following the discovery, Quest immediately suspended access to the affected system and activated its cybersecurity incident response procedures. The company also contacted federal law enforcement authorities and enlisted external cybersecurity specialists to investigate the breach and determine its scope.
In a regulatory filing submitted to the US Securities and Exchange Commission, Quest acknowledged that attackers appear to have accessed certain patient records. The company subsequently confirmed that patient health information and personally identifiable information were involved, although investigators have not established exactly which details were exposed.
The number of affected patients remains unknown. Quest has also not disclosed how the attackers entered the system, how long they maintained access, or whether any information was downloaded from its infrastructure.
As a precaution, the company temporarily restricted access to additional services, including Essential Insights and LabHQ. However, Quest said it had found no evidence that information stored within those platforms was accessed by unauthorized individuals.
Despite the security incident, the company maintains that its core operations remain functional and that its ability to provide medical testing services has not been materially affected. Healthcare providers can continue submitting laboratory orders through alternative systems while the affected platform is being restored.
The potential exposure is significant because Quest processes more than 200 million clinical laboratory tests annually and serves approximately one-third of American adults each year. Medical records can contain particularly sensitive information that may be exploited for identity theft or targeted phishing attempts.
This is not the company’s first encounter with a major data security incident. In 2019, a breach involving third-party billing provider American Medical Collection Agency potentially exposed information associated with approximately 11.9 million Quest patients.