Quest Diagnostics Confirms Hack on Quanum Platform
The company filed with the SEC on Thursday after discovering unauthorized access to patient records on its lab ordering system.
By Carolina Wood ·
Quest Diagnostics revealed on Thursday that hackers accessed sensitive patient data on its Quanum platform. The company disclosed the breach in an 8-K filing with the Securities and Exchange Commission. Quanum serves as a central hub for doctors and hospitals to order lab tests and process billing.
The company stated it became aware of the attack on Wednesday. The unauthorized access included specific patient records and protected health information. Quest has notified law enforcement and is currently investigating the incident. A security notice on the company's website indicates that personal information and medical records were taken.
Quest has not yet determined the full scope of the theft. The company is still identifying the exact types of data stolen. The security notice page currently contains code that prevents search engines from indexing the site. This makes the page difficult for the public to locate. Amanda Rivera, a spokesperson for Quest, directed questions to that notice rather than providing further details.
The potential scale of the breach is large. Quest materials state that approximately 500,000 clinicians use Quanum across thousands of locations in North America. A 2026 case study on the company's website describes a single health system that uses the platform. That system holds more than 6 million patients and hundreds of millions of medical documents.
Healthcare organizations face frequent cyber threats this year. Criminal groups often steal sensitive data and demand ransom payments to prevent publication. Stryker suffered a mass device wipe in March. Boston Scientific experienced a network outage in August that disrupted global operations. Other major breaches occurred at CareCloud, Craneware, and McKesson earlier this year.
This incident marks the second major data breach for Quest in the last decade. In 2019, the company lost 11.9 million patient records. That previous breach resulted from a cyberattack on a third-party billing company. Quest has not said when the current breach began or if a hacking group has contacted it with demands.
