Quest Diagnostics Breach Hits Quanum System Used by 500,000 Clinicians

A major medical testing company confirmed this week that a cyberattack targeted its core platform, putting patient information at risk.

Quest Diagnostics disclosed the incident in a filing with the U.S. Securities and Exchange Commission on Wednesday, October 22, 2026. The company reported that unauthorized access occurred within Quanum, a specific system used to order lab tests and manage billing. The platform holds significant amounts of patient health records along with diagnostic and billing data. Quest stated that the intrusion involved accessing "certain patient records" and noted that law enforcement has been notified while an investigation is underway.

The scope of the incident remains undefined. Quest has not yet specified how many patients or healthcare customers had information taken, nor has it identified when the breach started. The company also did not say if any hacking group has made contact regarding ransom demands. In its security notice, Quest acknowledged that some protected health information, including personal details and patient records, was accessed; however, the investigation is still determining the specific types of data involved.

The compromised Quanum platform is widely used across North America, with Quest's website stating that about 500,000 clinicians in thousands of locations utilize the system. While the total volume of records held by Quanum is unclear, a 2026 case study on the company's website illustrates the potential scale, showing that a single health system with more than 6 million patients can generate hundreds of millions of medical documents and charts.

This event marks Quest Diagnostics' second significant data breach in the last decade. In 2019, the company lost 11.9 million patient records following an attack on a third-party billing company. The current incident is part of a broader pattern of cyberattacks targeting the healthcare industry this year, which have caused major disruptions at companies including Stryker, Boston Scientific, CareCloud, Craneware, and McKesson.