Quest Diagnostics Investigates Unauthorized Access to Quanum System
Quest Diagnostics announced unauthorized access to the Quanum Lab Services Manager system. The company is investigating possible access to some patient records; the scope of the incident is not yet known.
The incident involving the Quanum system concerns unauthorized access to Quanum Lab Services Manager, which healthcare professionals use to order laboratory tests and view results. In a filing with the U.S. Securities and Exchange Commission (SEC) dated October 22, 2026, Quest Diagnostics said that certain patient records may have been accessed during the event.
The company has not yet disclosed the number of potentially affected people or the scope of the records to which an unauthorized actor may have gained access. It has also not been confirmed which specific categories of data may have been accessed, whether the data were copied or exfiltrated, or who was behind the intrusion.
What the Quanum system incident confirms
Quest Diagnostics confirmed the unauthorized access to Quanum Lab Services Manager itself. The platform is intended for healthcare professionals, and its functions include working with laboratory orders and patient results.
According to the Associated Press, the company informed federal law enforcement agencies about the event. It is also cooperating with external cybersecurity experts in the investigation. The Record likewise reported that the service was taken offline after the access was discovered.
At this stage, data exfiltration has not been confirmed. The possible access to patient records, however, makes the incident a matter with potential implications for patient privacy and for the work of healthcare providers who use the system.
The scope and method of the intrusion remain unknown
Quest has not disclosed the intrusion technique used or the identity of the attacker. Based on the available information, no connection can therefore be inferred to ransomware or a specific cyber group.
The long-term operational impact on clients and patients is likewise unknown. If taking the service offline was necessary to contain the incident and conduct the investigation, it may have temporarily affected access to test ordering or results in the affected system. Quest has not publicly specified the extent of any such disruption.
What comes next
Further information should come from the results of the forensic investigation. In particular, it will be important whether Quest Diagnostics confirms data exfiltration, what types of data may have been accessed, and how many people are involved in the case.
- notification of the number of affected patients and data categories,
- information about any contact with affected individuals,
- confirmation or denial of data exfiltration or copying,
- the status of service restoration, mitigation measures taken, and any reports to regulators.
The Quanum system incident remains under investigation. The company confirmed unauthorized access and possible access to some patient records, but key parameters of the case, including the scope and nature of the affected data, are not known.
Sources
- U.S. Securities and Exchange Commission — Quest Diagnostics Form 8-K – Confirms Quest Diagnostics’ filing with the SEC dated October 22, 2026.
- Quest Diagnostics — Quanum Lab Services Manager – Describes the system’s functions for ordering tests and accessing results.
- Associated Press – Provides details from the regulatory filing, the unknown scope of the incident, notification of federal authorities, and the involvement of external security experts.
- The Record – Corroborates that the incident involves a system for managing laboratory results and that the service was taken offline after the access was discovered.
Verified and updated: October 23, 2026, 15:23
