Quest Diagnostics Confirms Cyberattack Compromising Patients’ Personal and Health Data

Image: TechCrunch · Source

Quest Diagnostics disclosed a cyberattack affecting its Quanum lab testing system, compromising sensitive patient health and billing information. This incident adds to a wave of recent healthcare data breaches targeting medical companies.

Quest Diagnostics, a major medical lab testing company, has confirmed a cyberattack that compromised sensitive patient information stored in its systems. The breach targeted Quest’s Quanum lab testing platform, which facilitates lab test requests, billing, and stores extensive health records. The company disclosed the incident in a filing with the U.S. Securities and Exchange Commission, revealing unauthorized access to certain patient records. Quest notified law enforcement and is conducting an ongoing investigation but has not specified how many patients or healthcare providers were affected nor the exact data accessed.

Quanum is widely used, serving approximately half a million clinicians across thousands of North American locations. While the total scope of data involved remains unclear, case studies suggest the system can hold hundreds of millions of medical documents for large health systems. Quest’s website confirmed some protected health information, including personal data and patient records, was taken. Notably, the informational post on the breach is set to not appear in search engines, limiting public visibility.

This cyberattack follows a recent surge in high-profile breaches targeting the healthcare sector. Earlier in 2026, companies such as Stryker, Boston Scientific, CareCloud, Craneware, and McKesson also suffered disruptions and data theft from cybercriminals seeking financial gain through ransomware or data extortion.

Quest has not disclosed when the breach began nor if ransom demands have surfaced. This represents Quest Diagnostics’ second major data breach in a decade, following a 2019 incident involving a third-party billing company that exposed nearly 12 million patient records. The company has declined further comment as investigations continue. The incident underscores ongoing security challenges facing the healthcare industry amid rising attacks on health technology infrastructure.