What happened
On October 21, 2026, Quest Diagnostics learned of unauthorized access to Quanum Lab Services Manager (Quanum LSM), a portal some clients like doctor's offices use to order tests and look up results. Quest disclosed it in an SEC filing on October 22, notified federal law enforcement, and brought in outside security firms. It paused access to the portal and a few other provider tools as a precaution.
Quest says it believes certain patient records were accessed. It has not said how many people are affected or exactly which details.
What data was exposed
Not confirmed yet. Quest has not released a count or a list of fields. Because the portal handles test orders and results, it may include things like names, birth dates, contact info, test orders or results, and insurance or account numbers, but treat that as possible, not confirmed, until Quest sends notices.
Quest also confirmed to AP that this was not tied to the PHP bug that has been in the news.
What to do now
- 01Watch your mail. Health breaches in the US usually mean letters from the company once they know who was hit.
- 02Read your insurance explanation of benefits (EOB) statements. Visits, tests or bills you do not recognize can be a sign of medical identity theft.
- 03Be careful with calls, texts or emails from Quest asking you to confirm details or pay a bill. Call the number on your own paperwork instead.
- 04If you are offered free credit or identity monitoring in a notice letter, it is usually worth taking.
- 05A credit freeze is free and is a cheap safety net if your birth date and other ID details turn out to be involved.
How to check if you were affected
Quest's notification letter is the only way to know for sure you were in this specific incident.
Have I Been Pwned is free and shows public breaches that include your email, once data is verified.
OSINT Pro's email lookup shows what your email has turned up in across breach data and stealer logs. We are not claiming it includes Quest data unless that is later confirmed.