Quest Diagnostics reports cyberattack affecting patient records

Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager system on October 21, 2026, compromising patient health and identifiable information. The company paused access to the affected platform, notified federal law enforcement, and engaged external cybersecurity experts, stating core operations remain unaffected. The breach occurs amid widespread cyberattacks targeting medtech firms including Stryker, Abbott, and Boston Scientific in 2026.

Quest Diagnostics Quanum system breach

• ▪Quest Diagnostics identified unauthorized access to its Quanum Lab Services Manager system on October 21, 2026
• ▪The Quanum Lab Services Manager platform is used by healthcare providers and clients to place test orders and view or look up laboratory results
• ▪Quest Diagnostics paused access to its Quanum Lab Services Manager system and several unimpacted healthcare professional tools following the discovery of unauthorized access to that system on October 21, 2026

Patient records unauthorized access

• ▪Quest Diagnostics stated on its website that patient health information and patient identifiable information were part of the unauthorized access to its Quanum Lab Services Manager system
• ▪Quest Diagnostics reported in an October 22, 2026 regulatory filing that an unauthorized party accessed certain patient records, though the full scope and record count remain under investigation
• ▪Quest Diagnostics confirmed on October 22, 2026, that its cyber breach involving the Quanum Lab Services Manager system was not related to newly identified artificial intelligence-discovered vulnerabilities in the PHP programming language

Federal law enforcement notification

• ▪Quest Diagnostics stated that the Quanum Lab Services Manager system breach has not materially disrupted its core business operations or ability to serve patients
• ▪Quest Diagnostics notified federal law enforcement authorities after discovering the unauthorized access to its Quanum Lab Services Manager system on October 21, 2026

External cybersecurity investigation

• ▪Quest Diagnostics hired external cybersecurity experts to assist with the investigation and emergency response following the Quanum Lab Services Manager system breach
• ▪Quest Diagnostics previously experienced patient data exposure incidents in 2016 affecting 34,000 people and in 2019 affecting approximately 11.9 million patients through billing provider American Medical Collection Agency

Medtech industry cyberattack pattern

• ▪Cyberattacks against Stryker and Boston Scientific disrupted operations such as manufacturing, ordering, and shipping, impacting Stryker's first-quarter 2026 financial results
• ▪Medical device manufacturers including Stryker, Boston Scientific, Medtronic, Abbott, Intuitive, iRhythm, and AdaptHealth have all disclosed cyberattacks in 2026

AdvaMed cybersecurity standards initiative

• ▪Quest Diagnostics reported third-quarter 2026 revenue of $3.10 billion on October 22, 2026, exceeding consensus estimates of $3.05 billion while its stock fell 3.7% in premarket trading
• ▪AdvaMed Chairman Mick Farrell announced at The MedTech Conference that the lobby group is working to establish medtech industry standards for cybersecurity, privacy, and interoperability