Quest Diagnostics Confirms Patient Data Stolen in Latest Healthcare Cyberattack

If you have visited a doctor or hospital in North America recently, your health information may be part of a significant data compromise. Quest Diagnostics, one of the largest medical testing companies in the United States, has confirmed that cybercriminals accessed its systems and took sensitive patient data. This development affects ordinary people by raising the likelihood that their personal details and medical histories are now in the hands of unauthorized parties.

The company disclosed the incident in a formal filing with the U.S. Securities and Exchange Commission. Quest stated that it became aware of a cyberattack on Wednesday, October 21, 2026. The attackers targeted Quanum, a critical platform that allows healthcare providers to request lab tests and manage billing. Because this system holds a vast amount of medical records and financial data, the breach is considered severe.

According to the disclosure, the unauthorized access included specific patient records. Quest has already notified law enforcement and is actively investigating the scope of the theft. The company’s security notice indicates that protected health information was taken, including personal details and medical records. However, the company is still determining exactly which types of data were stolen and how many individuals are affected.

The scale of the potential impact is difficult to gauge because Quest has not yet released a specific number of affected patients or healthcare customers. The Quanum platform is used by approximately 500,000 clinicians across thousands of locations in North America. While the exact number of stored records is unknown, recent case studies suggest that a single large health system using the platform can hold hundreds of millions of related medical documents.

This incident is part of a broader trend of cyberattacks targeting the healthcare sector. In recent months, several major health tech companies have suffered significant disruptions and data thefts. For example, a March attack on medical tech maker Stryker resulted in the mass-wiping of employee devices. In August, a hack on medical implant manufacturer Boston Scientific forced its network offline for weeks, causing global operational disruptions.

Other recent breaches have affected medical recordkeeping company CareCloud, Scotland-based health tech provider Craneware, and U.S. pharmaceutical distributor McKesson. These attacks are often financially motivated, with cybercriminals stealing data and threatening to publish it if a ransom is not paid. Quest has not yet stated whether a specific hacking group has contacted the company with payment demands.

This is not the first major breach for Quest Diagnostics in the last decade. In 2019, the company lost 11.9 million patient records due to a cyberattack on a third-party billing company. The current incident highlights the ongoing challenges in protecting sensitive health data within complex digital ecosystems.

Quest spokesperson Amanda Rivera referred to the company’s security notice in response to questions about the incident. The notice on the company’s website currently includes code that tells search engines not to index the page, making it harder for the public to find the information through standard searches. The company continues to investigate the specific kinds of data that were compromised.

For readers in the Pacific Northwest and across the country, this breach serves as a reminder to stay vigilant regarding their personal and health information. While Quest continues its investigation, the confirmation of the data theft marks a significant event in the ongoing battle to secure healthcare infrastructure from cyber threats.