Health Data Heist: Quest Diagnostics Confirms Patient Records Stolen
A cyberattack on the Quanum platform has exposed personal and medical data for an unknown number of patients.
By David Almasi ·
11.9 million. That is the number of patient records lost in a previous breach, a stark reminder of the risks facing the medical sector. Quest Diagnostics has now confirmed a new cyberattack that compromised sensitive information in its systems. The company filed a formal notice with the U.S. Securities and Exchange Commission on Wednesday. This legal disclosure confirms that unauthorized access occurred. The specific amount of data stolen remains unknown at this time.
The attack targeted Quanum, a key digital platform used by healthcare providers. Doctors and hospitals rely on this system to order lab tests and process billing. It stores vast amounts of medical records, diagnostic results, and financial details. Quest stated that the hackers accessed certain patient records. The company has notified law enforcement. An internal investigation is currently underway to determine the full scope of the incident.
This breach is part of a troubling trend in the healthcare industry. Cyberattacks have caused major disruptions and data thefts throughout the year. Criminals often target health tech firms for financial gain. They steal sensitive data and demand ransom payments. If the ransom is not paid, they threaten to publish the stolen information publicly. This strategy has worked for attackers in previous high-profile cases.
Other major health companies have faced similar threats recently. Stryker suffered a mass-wiping of employee devices in March. Boston Scientific was forced offline for weeks in August. These outages caused significant global disruption to their operations. Other breaches affected CareCloud, Craneware, and McKesson. These incidents highlight how vulnerable the sector is to financially motivated groups.
Quest has not yet disclosed how many customers or patients were affected. The company states that Quanum is used by about half a million clinicians. These users operate in thousands of locations across North America. The exact volume of records stored on the platform is not public. However, a case study on the company's website suggests the scale is immense. One health system with over six million patients holds hundreds of millions of medical documents.
The timing of the initial breach has not been released. Quest has not said if a specific hacking group has made contact. There are no confirmed ransom demands at this stage. A spokesperson, Amanda Rivera, pointed to the company's security notice for details. The notice confirms that protected health information was taken. This includes personal data and patient records. The investigation continues to identify the specific types of data involved.
This is the second major data breach for Quest in ten years. The last major incident occurred in 2019. That attack targeted a third-party billing company. It resulted in the loss of 11.9 million records. The current situation remains fluid as the company gathers more information. Patients and providers await further updates on the impact of the Quanum breach.
