Quest Diagnostics confirms patient data was stolen in recent cyberattack
Major lab testing company admits hackers accessed sensitive health records on its Quanum platform.
By Ella Cox ·
The healthcare sector faces another significant security threat. Quest Diagnostics has officially confirmed that a cyberattack compromised patient information.
The company disclosed the incident in a formal filing with U.S. regulators. Quest stated that it discovered the breach on Wednesday. The attack targeted Quanum, a key system used by medical practices. This platform allows doctors to order lab tests and manage billing. It holds vast amounts of sensitive data, including medical records and diagnostic results.
Quest reported that unauthorized users accessed certain patient records. The company has already notified law enforcement. Investigators are currently working to determine the full scope of the intrusion. The firm has not yet specified how many patients or healthcare clients are affected. It also has not disclosed when the breach initially began.
This event follows a troubling trend in the industry. Healthcare organizations have faced numerous cyber incidents this year. Many of these attacks have caused long periods of disruption. Criminals often steal electronic health records and demand ransom payments. They threaten to publish the data if companies do not pay. Health tech firms have become prime targets for these financially motivated groups.
Recent months have seen other major disruptions. Stryker, a medical tech maker, had employee devices wiped in March. Boston Scientific was forced offline for weeks in August. That outage caused global operational issues. Other companies, including CareCloud, Craneware, and McKesson, also suffered massive data breaches earlier in the year.
Quanum is a widely used tool in the region. Quest materials indicate that about half a million clinicians use the system. These users operate from thousands of locations across North America. The exact number of records stored on the platform is not public. However, a recent case study suggests that a single large health system can hold hundreds of millions of medical documents. This highlights the potential volume of data at risk.
A Quest spokesperson, Amanda Rivera, did not answer specific questions about the incident. She directed inquiries to the company’s security notice. That notice confirms that protected health information was taken. It includes personal details and patient records. The company is still determining exactly which types of data were accessed. Notably, the web page contains code that tells search engines not to index it. This makes it harder for the public to find the update.
This is not the first time Quest has dealt with a major breach. In 2019, a cyberattack on a third-party billing company exposed 11.9 million patient records. The company is now focused on resolving the current issue. It has not said if a hacking group has contacted them with demands. There is also no update on whether a ransom was requested or paid. Patients and healthcare providers will likely wait for further details as the investigation progresses.
