Lab testing giant Quest Diagnostics confirms patients' personal and health data was compromised during breach

The HIPAA Journal reports that in its October 22, 2026, Form 8-K filing, the company said the unauthorized access was first identified on October 21, 2026.[2] According to NBC News, the system is Quest's Quanum Lab Services Manager, a platform that lets certain clients place test orders and receive or look up their results.[3]TechCrunch reports that Quest's notice says some patients' protected health information was taken, including "personal information and patient records,"[1] and that the company is still investigating which kinds of data were involved. TechCrunch also says the post on Quest's website currently contains "noindex" code, which tells search engines not to list the page in search results[1].Quest told Cybernews: "We are working diligently to identify the impacted patients and providers."[4] The company also told Cybernews that it has notified federal law enforcement authorities and engaged external cybersecurity experts[4].According to Fox Business, Quest Diagnostics temporarily suspended access to several systems following a cyberattack[5]. LiveNOW from FOX reports that Quest said the breach "has not materially disrupted" business operations.[6]According to Ground News, which summarized Associated Press reporting, Quest confirmed to The Associated Press that this breach is unrelated to recent global PHP vulnerabilities.[7] The HIPAA Journal reports that no threat group appears to have claimed responsibility for the intrusion.[2]NBC News notes that in 2019, personal information belonging to about 11.9 million Quest patients was affected after a separate hack at American Medical Collection Agency[3], a billing provider.