Quest Diagnostics Reports Unauthorized Access of Patient Records

Quest Diagnostics reported that an unauthorized party accessed its Quanum Lab Services Manager platform, which clients use to place orders and check test results, and the company believes certain patient records were exposed. The incident was disclosed in an SEC 8-K filing and Quest says it is working with law enforcement; operations and patient service have not been materially disrupted. The firm has not provided a definitive scope of the breach or details on how the intrusion was discovered, and has promised updates as the investigation continues.

The disclosure came amid a wave of critical vulnerabilities in PHP that were publicly revealed the same week and quickly exploited, prompting global patching efforts and millions of automated attack attempts, according to security firms. Quest has not confirmed a link to those PHP flaws, but the timing raised concern because many organizations were racing to patch exposed servers. Security observers note recent unrelated attacks on health-care companies - some financially motivated, others tied to state-linked groups - illustrating that the sector remains a frequent target and that increased scrutiny during mass patching can surface previously undetected breaches.