Quest Diagnostics o'zining Quanum LSM tizimiga ruxsatsiz kirish sodir bo'lganini ma'lum qildi va noma'lum shaxs ba'zi bemor yozuvlariga kirish imkoniyatiga ega bo'lishi mumkinligini tasdiqladi. Kompaniya 2026-yil 21-oktabrda hodisadan xabardor bo'lganini Form 8-K hisobotida qayd etgan.
Quanum LSM tizimi muayyan sog'liqni saqlash mijozlariga laboratoriya testlari buyurtmalarini joylashtirish, natijalarni olish va avvalgi natijalarni olish imkonini beradi. Quest o'z korporativ veb-saytida ushbu xizmatni Quanum Lab Services Manager deb ataydi, bu esa uning laboratoriya xizmatlariga provayderlar uchun kirish nuqtasi hisoblanadi.
Tergov davom etayotgan bo'lsa-da, Quest hodisa o'z biznes operatsiyalariga yoki bemorlarga xizmat ko'rsatish qobiliyatiga jiddiy ta'sir ko'rsatmaganini ma'lum qildi.
Ruxsatsiz faoliyat aniqlangandan so'ng, Quest tezda o'z kiberxavfsizlik hodisalariga javob berish tartiblarini ishga tushirdi. Javob choralariga kirishni cheklash, hujumning tabiati va ko'lamini tekshirish hamda tegishli tuzatish choralarini amalga oshirish kiradi.
Hisobot bilan birga e'lon qilingan alohida mijoz yangilanishida kompaniya ruxsatsiz kirish aniqlangandan so'ng ta'sirlangan tizimga kirishni to'xtatganini aytdi. Biroq bayonotlarda tergovchilar hujumni to'liq cheklaganmi yoki ruxsatsiz shaxs qanday kirganini aniqlaganmi, bu masalalar aniq emas.
Quest federal huquqni muhofaza qiluvchi organlarga xabar bergan va tergov hamda javob choralarida yordam berish uchun tashqi kiberxavfsizlik mutaxassislarini jalb qilgan.
Kompaniya aniq tahdid aktorini aniqlamagan, dastlabki kirish usulini oshkor qilmagan yoki hodisani dasturiy ta'minot zaifligidan foydalanish bilan bog'lamagan. Shuningdek, ransomware, tovlamachilik talabi yoki zararli dasturiy ta'minot joylashtirilgani haqida ham hech qanday ma'lumot yo'q.
Hisobotda Quest hozirda ruxsatsiz shaxs ba'zi bemor yozuvlariga kirgan deb hisoblayotgani ko'rsatilgan. Biroq bu qancha shaxs ta'sirlanganini, qanday turdagi ma'lumotlar ishtirok etganini yoki ruxsatsiz kirish qancha davom etganini aniqlamaydi.
Muhimi, hisobotda yozuvlar yuklab olinganmi, o'g'irlanganmi, e'lon qilinganmi yoki sotilganmi, bu masala tasdiqlanmagan. Ruxsatsiz kirish va tasdiqlangan ma'lumot o'g'irlanishi turli xulosalar bo'lib, tergov bu farqni ommaviy ravishda hal qilmagan.
Bayonotlarda ta'sirlangan bemorlarga xabar berish yoki ularga taklif etilishi mumkin bo'lgan himoya xizmatlari haqida ham tafsilotlar yo'q.
Quanum LSM tizimiga kirish to'xtatilganiga qaramay, Quest o'zining asosiy biznes operatsiyalari hali ham ishlayotganini ma'lum qildi. To'g'ridan-to'g'ri mijoz laboratoriya axborot tizimi interfeyslari yoki elektron tibbiy yozuvlar orqali test buyurtmalarini joylashtiradigan provayderlar ushbu kanallardan foydalanishni davom ettirishlari mumkin, ular esa ta'sirlanmagan.
Bu farq tasdiqlangan operatsion ta'sir faqat ta'sirlangan platforma bilan cheklanganligini va Questning buyurtma infratuzilmasi bo'ylab kengroq uzilish mavjud emasligini anglatadi. Hech qanday aniq tiklash muddati taqdim etilmagan.
Quest Diagnostics disclosed unauthorized access to its Quanum LSM system, confirming that an unidentified party may have accessed certain patient records. The company became aware of the incident on October 21, 2026,as stated in a Form 8-K disclosure.
The Quanum LSM system enables specific healthcare clients to place laboratory test orders, receive results, and retrieve previous results. Quest refers to the service on its corporate website as Quanum Lab Services Manager, a provider-facing entry point to its laboratory services.
Although the investigation is ongoing, Quest has reported that the incident has not materially disrupted its business operations or its ability to serve patients.
Upon discovering the unauthorized activity, Quest swiftly activated its cybersecurityincident response procedures. The response includes containment, investigating the intrusion’s nature and scope, and implementing appropriate remedial measures.
In a separate customer update accompanying the disclosure, the company said it paused access to the affected system after discovering the unauthorized access. However, the statements do not clarify whether investigators have fully contained the intrusion or determined how the unauthorized party gained access.
Quest has notified federal law enforcement authorities and has engaged external cybersecurity experts to assist in the investigation and response.
The company has not identified a specific threat actor, disclosed an initial access technique, or attributed the incident to the exploitation of a software vulnerability. There is also no indication of ransomware, an extortion demand, or the deployment of malicious software.
The filing indicates that Quest currently believes an unauthorized party accessed certain patient records. However, it does not specify how many individuals were affected, what types of information were involved, or how long the unauthorized access lasted.
Importantly, the disclosure does not confirm whether the records were downloaded, exfiltrated, published, or sold. Unauthorized access and confirmed data theft are distinct findings, and the investigation has not publicly resolved this distinction.
The statements also lack details on notifications to affected patients or any protective services they may offer.
Despite the suspension of access to the Quanum LSM system, Quest reported that its core business operations are still functioning. Providers using direct-customer laboratory information system interfaces or electronic medical records to order tests can continue to use those channels, which remain unaffected.
This distinction means that the confirmed operational impact is limited to the affected platform and does not indicate a broader outage across Quest’s ordering infrastructure. No specific restoration timeline has been provided.
Stops Cyber threats before impact with 21 min faster MTTR. Integrate ANYRUN’s Sandbox in your SOC.