Quest Diagnostics has reported a cyber breach involving one of its laboratory services platforms, with the company saying that certain patient records may have been accessed without authorisation.
The medical laboratory operator disclosed the incident in a regulatory filing, saying it detected unauthorised access to its Quanum Lab Services Manager platform, which allows some clients to place test orders and receive or review results.
Quest Diagnostics said it discovered the breach on Wednesday and notified federal law enforcement. The company is also working with external cybersecurity specialists as it investigates the incident.
FCRF’s Chief AI Officer Certification Returns on November 14 to Prepare Future AI Leaders
Scope of Patient Data Exposure Still Unclear
Quest Diagnostics said it believes certain patient records were accessed during the breach, but the number of affected patients and the specific information involved have not yet been determined.
The company said the investigation remains ongoing and that it is still assessing the full scope of the unauthorised access.
Quanum Lab Services Manager is used by certain Quest clients to manage laboratory testing workflows, including placing orders and accessing test results, making the potential exposure particularly sensitive because of the type of information handled through the platform.
Quest Has Faced Previous Patient Data Breaches
The latest incident is not the first time Quest Diagnostics has dealt with a cybersecurity breach involving patient information.
In 2016, the company disclosed an incident that exposed information belonging to about 34,000 people, including laboratory results and contact details.
A much larger breach emerged in 2019 through American Medical Collection Agency, a third-party billing collections provider. That incident affected personal information linked to about 11.9 million Quest patients.
The latest breach is separate from those earlier cases, and Quest has not yet disclosed whether financial, medical or other categories of personal information were involved this time.
Breach Unrelated to Recent PHP Vulnerability
Quest Diagnostics confirmed that the incident was not connected to the recently disclosed PHP security vulnerabilities that have triggered concern across organisations relying on the widely used programming language.
Those vulnerabilities have prompted companies and institutions to rush to apply security patches, but Quest said its current cyber incident is unrelated.
The company has not yet disclosed who was behind the intrusion, how the attackers gained access or how long the unauthorised activity may have continued.
For now, the investigation is focused on determining which patient records were accessed and whether any additional systems were affected.
About the author — Suvedita Nath is a science student with a growing interest in cybercrime and digital safety. She writes on online activity, cyber threats, and technology-driven risks. Her work focuses on clarity, accuracy, and public awareness.
Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics
