Quest Diagnostics Data Breach Investigation
Quest Diagnostics Incorporated reported unauthorized access to its Quanum LSM laboratory system, which clients use to place test orders and access results. According to the company’s Form 8-K, certain patient records may have been accessed, while the scope remained under investigation. Strauss Borrelli PLLC is investigating the Quest Diagnostics data incident and the rights of potentially affected patients. If you received a notice or believe your information was involved, fill out the secure contact form on this page to verify potential claim eligibility.
Key Facts at a Glance
- Entity Involved: Quest Diagnostics Incorporated (Laboratory Testing)
- Incident Type: Reported unauthorized access to the Quanum LSM system
- Date of Incident: Not disclosed
- Discovery Date: October 21, 2026
- Official Notice Date: Not disclosed; the Form 8-K was dated October 22, 2026
- Exposed Information: Certain patient records; specific data elements were not identified in the filing
- Affected Population: Under investigation
What Happened?
According to a Form 8-K, Quest Diagnostics learned on October 21, 2026, of unauthorized access to its Quanum LSM system. Certain laboratory clients use that system to place test orders and receive or look up test results. The company reported that it initiated its cybersecurity incident-response procedures to contain the activity, investigate its nature and scope, and implement remedial measures.
The filing, dated October 22, 2026, states that federal law enforcement was notified and external cybersecurity specialists were engaged to assist with the investigation and response. Quest Diagnostics said it believed an unauthorized party accessed certain patient records, although the full scope of the access remained under investigation. The company also reported that the incident had not materially disrupted its business operations or ability to serve patients. The filing did not disclose how the access occurred, how long it continued, or how many records may have been involved.
What Information Was Exposed?
The Form 8-K states that certain patient records were accessed, but it does not identify the specific information contained in those records. Therefore, individuals should not assume that particular identifiers, financial details, insurance information, diagnoses, or test results were involved unless they receive a notice confirming those details.
Patient-record incidents can create risks beyond ordinary financial identity theft. Depending on the information involved, criminals may attempt fraudulent medical billing, insurance-verification scams, prescription inquiries, or medical identity theft. They may also impersonate a laboratory, insurer, or healthcare provider to request payment or additional personal information. These are potential risks, not confirmed uses of the information in this incident.
What Should You Do Next?
- Review communications carefully: Read any notice from Quest Diagnostics or a healthcare provider that uses Quanum LSM. Confirm messages through a trusted telephone number or website rather than clicking unexpected links.
- Check medical and insurance records: Review explanation-of-benefits statements, patient portal activity, laboratory bills, and insurance claims for tests, providers, or services you do not recognize.
- Watch for healthcare impersonation scams: Be skeptical of callers or messages requesting payment, insurance verification, prescription details, passwords, or one-time security codes. Contact the provider or insurer independently.
- Monitor your credit reports: Obtain reports from the federally authorized AnnualCreditReport.com website and dispute unfamiliar accounts or inquiries. Consider a fraud alert or security freeze if sensitive identifiers are later confirmed as involved.
- Preserve relevant records: Save notices, envelopes, suspicious messages, billing records, and documentation of time or money spent responding. These materials may help establish what happened and evaluate possible rights.
Your Legal Rights
People whose information was involved in a cybersecurity incident may have rights under federal or state privacy, consumer-protection, medical-information, and data-security laws. The rights available depend on where the person lives, what information was accessed, how the incident occurred, whether notice was timely, and whether the person experienced documented harm or expenses.
Potential remedies may include reimbursement for certain losses, compensation for time spent addressing the incident, or other relief where permitted by applicable law. However, an investigation or security incident does not by itself establish liability, and the available filing does not determine whether any law was violated. Preserve all related documents and consider consulting a qualified attorney about your circumstances.
Why Hire Strauss Borrelli PLLC?
Strauss Borrelli PLLC investigates cybersecurity and privacy incidents involving patient and consumer information. The firm can review available notices, assess whether potentially affected individuals may qualify to pursue a claim, and explain possible next steps. Contacting an attorney does not guarantee a recovery, and any evaluation will depend on the facts, applicable law, and information confirmed through the ongoing investigation.
If you received a breach notification letter from Quest Diagnostics Inc.:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
