Quest Diagnostics Reports Quanum Intrusion, Possible Patient Record Access

Quest Diagnostics learned on October 21 of unauthorized access to Quanum LSM, which some clients use to place laboratory test orders and receive or look up results. In its SEC filing, Quest says it believes an unauthorized party accessed certain patient records. The full scope remains under investigation. Quest has begun containment and investigation, notified federal law enforcement, and engaged external cybersecurity experts. It reports no material disruption to patient services.

If your practice uses Quest, check the laboratory integration inventory and ask the staff who submit orders or retrieve results whether they use Quanum LSM. Then ask your Quest contact in writing whether your client account and patient records fall within the accessed material, which dates and record categories apply, and what client-directed steps Quest recommends. Give the answer and later notices to your privacy or incident-response team.

Verify the service name against your staff workflow and record Quest’s client-specific response. Treat patient-record scope as pending until Quest answers for your account; testing can continue while Quest determines the patient-record scope.