# Quest Diagnostics Reports Patient Data Exposure

Quest Diagnostics disclosed unauthorized access to its Quantum Lab Services Manager (LSM) system, first identified on October 21, 2026, and said patient records were likely accessed; the number of affected records remains undetermined. The company temporarily paused LSM access, engaged third-party cybersecurity experts, notified federal law enforcement, and provided alternative ways to order tests and receive results. Quest said patient services and business operations have not been affected. For government buyers and contractors, the incident is a healthcare cybersecurity and third-party-risk signal, not a stated procurement opportunity.

- Organizations handling protected health information should review incident-response and continuity plans for systems and vendors that support clinical or laboratory workflows.
- Healthcare contractors and suppliers can use the incident to assess how they would maintain ordering and results delivery if a system were temporarily taken offline.
- The scale of the breach remains unknown; subsequent disclosures may clarify the potential exposure and operational impact.

**Jurisdictions:** federal
**Industries:** Healthcare, Information Technology
**Topics:** Cybersecurity
**Published:** October 23, 2026

### Government Entities
- U.S. Securities and Exchange Commission (SEC)

### Vendors
- Quest Diagnostics (affected company)
- American Medical Collections Agency (AMCA) (debt collection vendor in a prior breach)

### Sources
- [Patient Data Likely Accessed in Quest Diagnostics Hack](https://www.hipaajournal.com/quest-diagnostics-data-breach-2026) - The HIPAA Journal