Quest Diagnostics confirms breach affecting data used by 500,000 clinicians

The healthcare technology sector continues to face significant digital threats as major institutions struggle to secure patient information. Quest Diagnostics has officially confirmed that a cyberattack compromised sensitive data within its systems.

The company made this determination through a filing with the U.S. Securities and Exchange Commission. This regulatory document serves as the formal notification for stakeholders regarding the incident.

Quest stated that it became aware of the intrusion on Wednesday. The attack targeted Quanum, a specific laboratory testing system. This platform is critical for medical operations as it allows doctors, hospitals, and other healthcare practices to request tests for patients. It also manages the associated billing processes.

Because of its function, the Quanum system holds a vast amount of data. This includes patient health and medical records, as well as diagnostic and billing information. Quest confirmed that unauthorized individuals accessed certain patient records during the breach. The company has notified law enforcement and is currently conducting an investigation into the matter.

This incident is part of a broader trend of cyberattacks affecting the medical industry in 2026. A series of breaches has caused weeks of disruption in recent months. These attacks have allowed criminals to steal millions of electronic health records. Health tech companies are frequent targets for financially motivated attackers. These groups aim to steal sensitive data and often threaten to publish it if a ransom is not paid.

Several major medical companies have suffered similar fates recently. Stryker, a medical technology maker, experienced a cyberattack in March that resulted in the mass wiping of employee devices. In August, Boston Scientific, a manufacturer of medical implants, was forced to take its network offline for weeks. This caused global disruption to its operations. Additionally, separate hacks have led to massive data breaches at CareCloud, Craneware, and McKesson.

Quest has not yet revealed the exact number of patients or healthcare customers affected by the attack on its Quanum systems. The company notes that Quanum is used by approximately 500,000 clinicians in thousands of locations across North America. While the total number of records held is unclear, a 2026 case study on the company's website illustrates the scale of potential exposure. It shows that a single health system with over six million patients can hold hundreds of millions of related medical documents.

The company has not specified when the breach began or if any hacking group has made contact with demands. A spokesperson for Quest, Amanda Rivera, referred questions about the incident to the company's security notice. That notice states that protected health information, including personal data and patient records, was taken. The company is still investigating the specific types of data involved. The webpage currently contains technical code that prevents search engines from listing the page, making it harder for the public to find.