Quest Diagnostics Admits to Cyberattack on Core Lab Platform

The healthcare sector faces another significant security challenge as major providers continue to grapple with digital threats. Quest Diagnostics has officially confirmed that a cyberattack compromised its systems, exposing sensitive patient information to unauthorized parties.

In a regulatory filing submitted to the U.S. Securities and Exchange Commission, the company disclosed that it discovered the intrusion on Wednesday. The attack targeted Quanum, a critical platform used by hospitals, clinics, and doctors’ offices to request lab tests and process billing. This system acts as a central hub for extensive medical records, diagnostic results, and associated financial data. Quest stated that the unauthorized access involved the retrieval of certain patient records and that law enforcement has been notified as the internal investigation continues.

This incident marks the latest in a series of disruptive cyber events affecting the medical industry throughout 2026. Financially motivated cybercriminals have increasingly targeted health tech firms, seeking to steal large volumes of sensitive data to use in ransom demands. Earlier this year, medical technology manufacturer Stryker suffered a mass-wiping of employee devices, while implant maker Boston Scientific experienced a network outage lasting weeks that caused global operational disruptions. Additionally, major data breaches at recordkeeping firm CareCloud, health tech provider Craneware, and pharmaceutical distributor McKesson have further illustrated the sector's vulnerability.

Despite the scale of the platform, Quest has not yet specified the exact number of healthcare customers or patients affected. The company’s materials indicate that Quanum is utilized by approximately 500,000 clinicians across thousands of locations in North America. While the total volume of stored health records remains unclear, a 2026 case study on the company’s website notes that a single health system with over six million patients can hold hundreds of millions of related medical documents. This suggests the potential scope of the data exposure could be substantial.

Quest has not disclosed when the breach initially began or if any hacking group has contacted them with ransom demands. Amanda Rivera, a company spokesperson, deferred to a security notice on the company’s website for details. That notice confirms that protected health information, including personal data and patient records, was taken, though the specific types of data remain under investigation. Notably, the webpage currently includes code that prevents search engines from indexing it, making the information harder for the general public to find.

This is the second major data breach to impact Quest Diagnostics in the last decade. The previous incident occurred in 2019, when a cyberattack on a third-party billing company resulted in the loss of 11.9 million patient records. As the investigation proceeds, the company is working to determine the full extent of the compromise and the specific nature of the stolen information.