Zero Radar
← feed
HighData breachupdated 25 Oct 2026, 15:24 UTC

Quest Diagnostics patient records exposed through lab ordering system breach

A hacker got into a system that some labs and clinics use to order patient tests, and patient records may have been stolen. If you have had blood or lab tests through Quest Diagnostics, your personal health information could be affected.

Attacks reported (BleepingComputer)3 independent sources
SeverityHighData breach
Being exploited?ReportedBy BleepingComputer, not officially confirmed yet
What to doCheck exposureCheck for an official notice from Quest Diagnostics and monitor your financial and medical accounts for unusual activity.
How sure is this?3 independent sourcesSeveral independent publishers agree

How the attack works simplified

  1. 1Threat actorUnknown party targets the lab platform
  2. 2Quanum LSM accessGains entry to the test ordering system
  3. 3Patient recordsCertain patient records may be accessed or taken
  4. 4NotificationQuest discloses the breach in a regulatory filing
  5. ResultPatient records potentially exposed

What happened

An unauthorized party accessed Quest Diagnostics' Quanum Lab Services Manager (LSM), a platform where certain clients place test orders, and may have accessed or exfiltrated patient data.

Why it is dangerous: Exposed patient records can include personal and health information, which can be used for identity theft, fraud, or targeted scams against the patients involved.

Are you affected?

You are affected if you had lab tests ordered through Quest Diagnostics or a client using its Quanum Lab Services Manager platform and your records were among those exposed.

Quest Diagnostics Quanum Lab Services Manager (LSM) platform; patient records held in it. Specific versions: unknown.

What to do

  1. Watch for letters or notices from Quest Diagnostics about whether your records were included
  2. Monitor your bank and credit accounts and consider a credit freeze
  3. Be wary of unexpected emails, calls, or texts that mention your lab tests or medical data
  4. Ask your healthcare provider or Quest Diagnostics what information was involved

Timeline

  1. 23 Oct 2026, 08:25 UTC
    Publicly disclosed
  2. 23 Oct 2026, 08:25 UTC
    Reported by SecurityWeek · SecurityWeek
  3. 23 Oct 2026, 16:40 UTC
    Reported by BleepingComputer · BleepingComputer
  4. 25 Oct 2026, 15:24 UTC
    The Record reported on it · The Record

Sources 3 reports, oldest first

Security press established security newsrooms

Technical details

ID
ZR-f5822523 · ZR-0515431e · ZR-8bb70837
Disclosed
23 Oct 2026, 08:25 UTC
On Zero Radar
before the radar started
Last change
25 Oct 2026, 15:24 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

Quest Diagnostics patient records exposed through lab ordering system breach · Zero Radar