Quest Diagnostics ma'lumotlar buzilishi bemor yozuvlarini fosh qilganini tasdiqladi

Quest Diagnostics ma'lumotlar buzilishi bemor yozuvlarini fosh qilganini tasdiqladi

Bill Toulas tomonidan

2026-yil 23-oktabr

12:40

0

Amerika klinik laboratoriya kompaniyasi Quest Diagnostics tahdidchi o'zining Quanum LSM tizimiga ruxsatsiz kirish huquqiga ega bo'lganidan so'ng bemor yozuvlari fosh qilinganini ma'lum qildi.

Kompaniya buzilish haqida 21-oktabrda xabar topdi va "faoliyatni to'xtatish, hodisaning tabiati va ko'lamini baholash va tekshirish hamda tegishli tuzatish choralarini amalga oshirish" uchun o'z hodisaga javob protokolini ishga tushirdi.

"2026-yil 21-oktabrda Quest Diagnostics Incorporated o'zining Quanum LSM tizimiga ruxsatsiz kirish haqida xabar topdi, bu tizimdan ayrim mijozlar test buyurtmalarini joylashtirish, natijalarni olish va qidirish uchun foydalanadi," deb aytadi kompaniya AQSh Qimmatli qog'ozlar va birja komissiyasiga (SEC) taqdim etgan arizada.

Quest Diagnostics AQShda yirik klinik laboratoriya kompaniyasi bo'lib, keng turdagi tibbiy sharoitlar uchun diagnostik tekshiruv va xizmatlar taqdim etadi.

U Shimoliy Amerikada 7 700 ta nuqtada faoliyat yuritadi, 65 000 kishini ish bilan ta'minlaydi va yillik daromadi 11 milliard dollardan oshadi. Kompaniya har yili AQSh kattalarining uchdan biriga xizmat ko'rsatishini aytadi.

Quanum LSM (Lab Services Manager) — bu shifokorlar, shifoxona xodimlari va tibbiy ofis xodimlari laboratoriya xizmatlarini boshqarish, test natijalariga kirish, holatni kuzatish va materiallar buyurtma qilish uchun foydalanadigan onlayn platforma.

Kompaniya buzilishni SECga ma'lum qildi va o'z veb-saytida e'lon qilingan ogohlantirishda qo'shimcha ma'lumot berdi.

Kompaniya hali ham hodisani tekshirmoqda, lekin ayrim bemor yozuvlari fosh qilinganiga ishonadi. Ta'sirlangan ma'lumotlar turlari hali aniqlanmagan.

Tashqi mutaxassislar davom etayotgan tekshiruvga yordam bermoqda va Quest Diagnostics tegishli huquqni muhofaza qilish organlarini ham xabardor qilgan.

Kompaniya hodisa mijozlarga yo'naltirilgan operatsiyalarni to'xtatmaganini va to'g'ridan-to'g'ri mijoz LIS interfeyslari yoki EMR foydalanuvchilari ta'sirlanmaganini aytadi.

Ehtiyot chorasi sifatida Quest Diagnostics boshqa tizimlarga, jumladan Essential Insights va LabHQ ga kirishni vaqtincha to'xtatdi.

Hozirda Quanum LSM tizimi to'xtatilgan va mijozlarga buyurtmalarni joylashtirish va natijalarni olish uchun qog'oz talabnomalaridan yoki Quanum eLabs dan foydalanish tavsiya etiladi.

Yozish paytida BleepingComputer Quest Diagnosticsga hujumni da'vo qilgan tahdid guruhini topa olmadi.

2019-yilda to'lov yig'ish provayderi American Medical Collection Agency (AMCA) da sodir bo'lgan buzilishda taxminan 11,9 million Quest Diagnostics bemorining ma'lumotlari buzilgan.

Ma'lumot e'lon qilinganidan so'ng Quest Diagnosticsga qarshi kamida 19 ta jamoaviy da'vo arizasi berilgan. Ishlar ko'p tumanli sud jarayoniga birlashtirilgan bo'lib, u hali ham davom etmoqda va hal qilinmagan.

Hujumchilar haqiqiy ma'lumotlarga ega bo'lgandan so'ng, ularning harakatlarining faqat 37% i bloklanadi

Umumiy oldini olish ballari dastlabki kirishdan keyin nima sodir bo'lishini yashirishi mumkin. Hujumchilar haqiqiy ma'lumotlardan foydalanayotganda oldini olish keskin pasayadi.

Blue Report 2026 mijozlar ishlab chiqarish muhitlarida o'tkazilgan 338 million simulyatsiya bo'yicha texnikadan texnikaga mudofaa choralarini o'lchaydi.

Hisobotni oling

Tegishli maqolalar:

AdaptHealth iyul oyidagi kiberhujumda 4,1 million kishi ta'sirlanganini tasdiqladi

Aesto Health ma'lumotlar buzilishi 9,5 milliondan ortiq bemorga ta'sir qilganini aytadi

McKesson ShinyHunters bemor ma'lumotlarini o'g'irlaganini da'vo qilganidan so'ng buzilishni e'lon qildi

Shifoxona operatori Nutex Health kiberhujumda ma'lumotlar o'g'irlanganini aytadi

IQVIA sog'liq ma'lumotlarini to'g'ri anonimlashtirmagani uchun 7,8 million dollar jarimaga tortildi

Quest Diagnostics confirms data breach exposed patient records

By Bill Toulas

October 23, 2026

12:40 PM

0

American clinical laboratory company Quest Diagnostics disclosed that patient records have been exposed after a threat actor gained unauthorized access to its Quanum LSM system.

The company learned about the breach on October 21 and deployed its incident response protocol "to contain the activity, assess and investigate the nature and scope of the incident and implement appropriate remedial measures."

“On October 21, 2026, Quest Diagnostics Incorporated learned of unauthorized access to its Quanum LSM system, which certain clients use to place test orders, receive and look up results,” the company says in a filing with the U.S. Securities and Exchange Commission (SEC).

Quest Diagnostics is a major clinical laboratory company in the United States, providing diagnostic testing and services for a wide range of medical conditions.

It operates 7,700 points across North America, employs 65,000 people, and generates more than $11 billion in annual revenue. The company says it serves one in three U.S. adults each year.

Quanum LSM (Lab Services Manager) is the firm’s online platform that physicians, hospital personnel, and medical office staff use to manage laboratory services, access test results, track status, and order supplies.

The company disclosed the breach to the SEC and provided more information in an alert on its website.

The company is still investigating the incident but believes some patient records were exposed. The types of data affected have yet to be determined.

External experts are aiding the ongoing investigation, and Quest Diagnostics has also informed the applicable law enforcement authorities.

The company says that the incident has not disrupted its customer-facing operations and users of direct-customer LIS interfaces or EMRs were not impacted.

As a cautionary measure, Quest Diagnostics has temporarily paused access to other systems, including Essential Insights and LabHQ.

Currently, the Quanum LSM system has been stopped, and customers are recommended to use paper requisitions or Quanum eLabs to place orders and receive results.

As of writing, BleepingComputer could not find a threat group claiming the attack on Quest Diagnostics.

In 2019, data of about 11.9 million Quest Diagnostics patients was compromised in a breach at billing collection provider American Medical Collection Agency (AMCA).

Following the disclosure, at least 19 class-action lawsuits were filed against Quest Diagnostics. The cases were consolidated into multidistrict litigation, which remains ongoing and unresolved.

Once attackers have valid credentials, only 37% of their actions are blocked

Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.

The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.

Get the report

Related Articles:

AdaptHealth confirms 4.1 million people exposed in July cyberattack

Aesto Health says data breach affects over 9.5 million patients

McKesson discloses breach after ShinyHunters claims patient data theft

Hospital operator Nutex Health says data stolen in cyberattack

IQVIA fined $7.8 million for failing to properly anonymize health data