Half a Million Clinicians Use the System Quest Says Was Hacked

The healthcare sector is under heavy pressure from digital threats this year. Quest Diagnostics just confirmed a cyberattack that compromised sensitive patient data.

The lab testing giant filed a report with the U.S. Securities and Exchange Commission on Wednesday. The filing details an unauthorized breach of its Quanum system. Quanum is a critical platform used by doctors, hospitals, and other practices. It handles test requests, billing, and records. Quest stated that certain patient records were accessed during the incident. The company has notified law enforcement and is currently investigating the scope of the theft.

This event is the latest in a string of major attacks on health tech firms. Cybercriminals are targeting these companies for financial gain. They often steal large amounts of data and threaten to publish it if a ransom is not paid. This year has seen significant disruptions in the industry. In March, Stryker, a medical tech maker, had employee devices wiped by an attack. In August, Boston Scientific was forced offline for weeks. That incident caused global disruption to its operations. Other breaches hit CareCloud, Craneware, and McKesson throughout the year. These events have stolen millions of electronic health records.

Quest has not yet revealed how many patients or healthcare customers were affected. The company notes that Quanum is used by about half a million clinicians. These users are located in thousands of sites across North America. It is unclear exactly how many health records the platform holds. However, a 2026 case study on Quest’s website provides a scale. It shows that a single health system with over 6 million patients can generate hundreds of millions of medical documents. This suggests the potential data volume is massive.

The company has not said when the breach began. It also has not confirmed if any hacking group has contacted them. There is no word on whether demands for payment were made. Amanda Rivera, a spokesperson for Quest, did not answer specific questions from reporters. She directed them to the company’s security notice. That notice states that protected health information was taken. It includes personal information and patient records. The company is still determining the specific types of data stolen. The website page for this notice currently contains code that hides it from search engines. This makes it harder for the public to find the update.

This is the second major data breach for Quest in a decade. The previous incident occurred in 2019. At that time, a cyberattack on a third-party billing company led to the loss of 11.9 million patient records. The company is now working to secure its systems again. The outcome of the investigation will determine the next steps for affected users.

The healthcare industry remains a primary target for attackers. The combination of valuable data and operational impact makes it a lucrative goal. Companies like Quest are under scrutiny to protect this information. Patients and providers are waiting for more details on the extent of the compromise.