Quest Diagnostics data breach Quanum LSM involved unauthorized access to the company’s Quanum Lab Services Manager, and certain patient records may have been accessed. The company disclosed the incident after finding the access on Wednesday and filing with the SEC on Thursday.
The affected system is used by clients to place orders and check test results. That makes the incident more than a generic network event, because the system sits between patients, providers, and the records those clients rely on.
Quanum Lab Services Manager
Quest Diagnostics said the unauthorized access reached the system that handles ordering and results review. The company believes an unauthorized party accessed certain patient records, but it has not said how many records were involved.
That gap leaves the scale of the exposure unresolved. A breach affecting a workflow system can be narrow in technical scope and still touch information that patients and clients expect to stay tightly controlled.
Quest Diagnostics SEC filing
Quest Diagnostics disclosed the incident in an SEC filing on Thursday after discovering the unauthorized access on Wednesday. The company also said it is working with law enforcement to investigate the hack.
Its statement adds an unusual wrinkle for readers tracking the risk: Quest Diagnostics said the incident has not materially disrupted business operations or its ability to serve patients. In other words, the company is treating the breach as a records-security problem rather than an outage, even as the patient-data review continues.
The unresolved question is the full scope of the access, including whether the affected records were limited to a small set of accounts or spread more widely through Quanum Lab Services Manager.
