Quest Diagnostics Confirms Data Breach Affecting Patients' Personal and Health Information

Medical lab testing giant Quest Diagnostics has confirmed a cyberattack and data breach affecting sensitive patient information stored in its systems. This disclosure was made in a legally required filing with U.S. regulators.

In an 8-K filing with the U.S. Securities and Exchange Commission, Quest revealed that it learned of the cyberattack on Wednesday, targeting its lab testing system, Quanum. This platform is utilized by doctor’s offices, hospitals, and healthcare practices to request lab tests for patients and manage billing. It stores a significant amount of patient health records, diagnostic data, and billing information.

The company stated that unauthorized access included the accessing of "certain patient records." Quest has notified law enforcement and is currently investigating the incident.

This cyberattack is part of a troubling trend in the healthcare industry, which has faced numerous cyber incidents this year. A series of attacks have led to the theft of millions of electronic health records and other sensitive medical information. Healthtech companies are increasingly targeted by financially motivated cybercriminals who aim to steal sensitive data and threaten to publish it unless a ransom is paid.