Quest Diagnostics data breach (October 2026): what Quest confirmed
In October 2026 Quest Diagnostics disclosed unauthorized access to its Quanum Lab Services Manager, the system clinics use to order tests and view results.
Short answer
Was Quest Diagnostics hacked?
Yes. Quest’s Form 8-K says it learned on 21 October 2026 of unauthorized access to its Quanum Lab Services Manager, and Quest says patient records including health and identifying information were accessed.
Quest says the incident was contained and the system restored. It has not said how many patients were affected.
Timeline at a glance
21 Oct 2026Quest learns of unauthorized access to Quanum LSM. (SEC 8-K)Confirmed
26 Oct 2026Quest says the incident is remediated and LSM restored. (Quest notice)Confirmed
Last updated October 31, 2026. Every entry is dated and linked to its source; claims by attackers are labelled as claims, never stated as fact.
Quest Diagnostics’s security posture at the time
What Quest Diagnostics publicly said about its security certifications and controls, how big it is, and how its shares moved, each tied to a source. A certificate covers a stated scope at a point in time; it is not a guarantee about every system. Reviewed 31 October 2026. Compare all 2026 breaches.
Security certifications publicly held
No public certification found.
No public certification found on the company’s own security, trust or compliance pages, in filings, or in the certificate registries searched (BSI, CSA STAR). That is a data point, not proof that none exists.
No reliable report of a share-price move around the disclosure was found.
Quest Diagnostics incident timeline, in detail
Confirmed = acknowledged by Quest Diagnostics, a regulator filing or a court. Reported = credible reporting Quest Diagnostics has not fully confirmed. Unverified claim = an attacker or leak-site claim.
22 Oct 2026 (found 21 Oct)ConfirmedHealthcare IT / patient records
Unauthorized access to Quanum Lab Services Manager
What happened. Quest’s Form 8-K says it learned on 21 October 2026 of unauthorized access to its Quanum Lab Services Manager, which clients use to order tests and view results. Quest says patient records, including health and identifying information, were accessed, and that the incident was contained.
Impact. Patient health and identifying information accessed, per Quest. People or records affected: Not disclosed.
We found no SOC 2 or ISO 27001 certification published by Quest Diagnostics. That does not prove it had none; it means none was public.
A direct intrusion
The company describes unauthorized access to its own systems. The useful questions are how long the access lasted, how it was detected, and whether the affected system was inside the scope any certification covered.
What it means for Quest Diagnostics patients, practices and hospitals that use Quanum — and what to do
What Quest Diagnostics’s customers, partners and security teams can do now, based only on what has been disclosed.
1.Ask what was in scope
Ask which systems were reached, what data of yours they held and the dates of access.
Yes. Quest’s Form 8-K says it learned on 21 October 2026 of unauthorized access to its Quanum Lab Services Manager, and Quest says patient records including health and identifying information were accessed.
Did Quest Diagnostics have SOC 2 or ISO 27001 certification?+
We found no SOC 2 or ISO 27001 certification published by Quest Diagnostics. That does not prove it had none; it means none was public.
More in the Breach Index
Same sourced, verification-tagged timeline, company by company — compare how peers have fared.
Independent analysis for security-leadership education; not affiliated with or endorsed by Quest Diagnostics. Facts are attributed to the dated sources above, and anything disputed or unconfirmed is labelled as such. See the full Breach Index.
🎉 New here? Use code WELCOME10 for 10% off any plan at checkout