Ma'lumotlar buzilishi
Quest Diagnostics ma'lumotlar buzilishi "Ba'zi bemor yozuvlari"ni fosh qildi
Regulyatorlik arizada Quest Diagnostics o'zining Quanum Lab Services Manager tizimiga ruxsatsiz kirish haqida xabar berdi — bu platforma orqali ba'zi mijozlar test buyurtmalarini joylashtirishi mumkin.
Muallif
Associated Press
| 23-oktabr, 2026 (ET soat 4:25)
Tibbiy laboratoriya operatori Quest Diagnostics bu hafta o'z tizimlaridan biriga kiberbuzilish sodir bo'lganini bilib olganini aytdi, bu esa bemorlar uchun ba'zi yozuvlarni ehtimol buzgan.
Payshanba kuni regulyatorlik arizada Quest Diagnostics o'zining Quanum Lab Services Manager tizimiga "ruxsatsiz kirish" haqida xabar berdi — bu platforma orqali ba'zi mijozlar test buyurtmalarini joylashtirishi, natijalarni qabul qilishi yoki ko'rishi mumkin. Kompaniya chorshanba kuni xakerlikni aniqlaganini va federal huquqni muhofaza qilish organlarini xabardor qilganini aytdi.
Qancha bemor va qaysi aniq yozuvlar ta'sirlanganligi hali noma'lum. Quest Diagnostics buzilishda "ba'zi bemor yozuvlari"ga kirilganiga ishonishini, ammo to'liq ko'lam hali tekshirilayotganini aytdi.
Nyu-Jersi shtatida joylashgan kompaniya o'z javobida yordam berish uchun tashqi kiberxavfsizlik mutaxassislari bilan ham ishlayotganini aytdi.
Quest Diagnostics avval ham bemor yozuvlariga ta'sir qilgan xakerliklarni ko'rgan. Masalan, 2016-yilda kompaniya taxminan 34 000 kishining laboratoriya natijalari va aloqa ma'lumotlarini o'z ichiga olgan ma'lumotlar boshqa onlayn buzilishda fosh qilinganini aytgan edi. 2019-yilda esa American Medical Collection Agency, hisob-kitob yig'ish xizmati provayderidagi alohida xakerlikdan so'ng, taxminan 11,9 million Quest bemorining boshqa shaxsiy ma'lumotlari ta'sirlangan edi.
Kiberhujumlar barcha sohalarda ortib bormoqda. Sog'liqni saqlashdan tashqari, boshqa buzilishlar yaqinda supermarket tarmoqlaridan tortib, asosiy ta'lim ilovalarigacha hamma narsani buzgan.
Dunyo bo'ylab hukumatlar va kompaniyalar onlayn xavfsizlikni yangilash ustida kengroq ishlamoqda. Bu hafta PHP deb nomlangan dasturlash tilidagi zaifliklarni AI yordamida aniqlashdan so'ng shoshilinchlik paydo bo'ldi — bu til global veb-saytlarning 70% i uchun muhimdir.
Ko'plab firmalar ushbu xavflarni tuzatishga shoshilayotgani sababli, ko'pchilik uchun uzilishlar va cheklangan xizmatlar davom etmoqda. Ammo kompaniya tekshiruviga asoslanib, Quest Diagnostics payshanba kuni The Associated Pressga o'z kiberbuzilishi PHP muammosi bilan bog'liq emasligini tasdiqladi.
Bog'liq: Paradigm Healthcare ma'lumotlar buzilishida 970 000 Medi-Cal a'zosi ta'sirlangan
Bog'liq: Xakerlar Nikkei'dan 1,8 million yozuvni o'g'irladi
Bog'liq: Bitta buzilgan kirish Kaliforniya o'quvchilarining millionlab yozuvlarini fosh qildi
Muallif: Associated Press
Kundalik xabarnoma
So'nggi kiberxavfsizlik tahdidlari, tendentsiyalar va mutaxassis fikrlari haqida xabardor bo'lish uchun SecurityWeek elektron pochta xabarnomasiga obuna bo'ling.
Biznes elektron pochta*
emailsignupsource
Ko'proq ma'lumot olish uchun Maxfiylik siyosatimizni o'qing.
Associated Pressdan ko'proq
- Meta Nyu-Meksikoga Facebook'da foydalanuvchilarni maxfiylik haqida aldash uchun 25 milliard dollar to'lashga majbur qilindi
- Xitoy DeepSeek'ni AQSh hukumat tizimlaridan taqiqlaganidan so'ng himoya qildi
- Konferensiya xonasini tinglash qurilmasi topilganidan so'ng, sobiq OpenAI xodimi Saudiya Arabistoniga uchishni rejalashtirgan, prokurorlar aytishicha
- OpenAI konferensiya xonasida tinglash qurilmasi topilganidan so'ng, xodim hibsga olindi, FBI va kompaniya aytishicha
- OpenAI AI xavflari bo'yicha bahsda 3 ta xavfsizlik tadqiqotchisini ishdan bo'shatdi
- Arizona sud tizimiga kiberhujumda 1 milliondan ortiq kishining shaxsiy ma'lumotlari o'g'irlandi
- Tramp milliy razvedka direktori Jay Claytonni yangi federal AI ishchi guruhiga rahbar etib tayinladi
- FTC OpenAI va Anthropic'ni iste'molchilarga mumkin bo'lgan xavflar bo'yicha tekshirmoqda
So'nggi yangiliklar
- Sobiq 8200 bo'linma ofitserlari agentik SecOps startapi Mave uchun 34 million dollar yig'di
- Boshqa yangiliklarda: Tor chiqish releylari o'g'irlandi, banklar yovuz AI agentlarini aniqladi, o'z-o'zini tiklaydigan macOS ransomware
- Mirai botnet operatorlari PHP2Shell hujumlariga qo'shildi, ASLR chetlab o'tish ekspluatlari paydo bo'ldi
- Xitoy APT AI pentest vositasi Artex'dan ConnectWise hujumlarida foydalanmoqda
- Hujumchilar to'rt oy ichida uchinchi Arista VCO nol kunini ekspluatatsiya qilmoqda
- Capcom ma'lumotlar buzilishida 11 million ta'sirlangan
- LiteLLM yangi ta'minot zanjiri hujumida buzildi
- Atlassian ma'lumotlar markazi va server mahsulotlarida 75 ta kamchilikni tuzatdi
Trend
Texnologiya va xavfsizlik kompaniyalari PHP2Shell zaifliklariga javob bermoqda
Xitoy APT AI pentest vositasi Artex'dan ConnectWise hujumlarida foydalanmoqda
Mirai botnet operatorlari PHP2Shell hujumlariga qo'shildi, ASLR chetlab o'tish ekspluatlari paydo bo'ldi
Boshqa yangiliklarda: Tor chiqish releylari o'g'irlandi, banklar yovuz AI agentlarini aniqladi, o'z-o'zini tiklaydigan macOS ransomware
PHP2Shell yamoqlari birinchi ekspluatatsiya urinishlari sensorlarga urilganda yetib keldi
PHP2Shell: Ochiq muhim PHP kamchiliklari uchun ommaviy ekspluatatsiya yaqinlashmoqda
Quest Diagnostics ma'lumotlar buzilishi "Ba'zi bemor yozuvlari"ni fosh qildi
Signal zaifligi yovuz qo'ng'iroq qiluvchilarga qo'ng'iroqlarni to'xtatishga ruxsat beradi
Kundalik xabarnoma
So'nggi tahdidlar, tendentsiyalar va texnologiyalar haqida xabardor bo'lish, shuningdek, soha mutaxassislarining chuqur fikrlarini olish uchun SecurityWeek elektron pochta xabarnomasiga obuna bo'ling.
Biznes elektron pochta*
emailsignupsource
Maxfiylik siyosatimizni o'qing.
Vebinar: Sizning Google Workspace'dagi AI kirish xavfi allaqachon mavjud
19-oktabr, 2026
Google Workspace'ga ulangan AI vositalari millionlab nozik elektron pochta va fayllarga kirishi mumkin. Tashkilotingiz xavfini aniqlash va AI kirishini boshqarish uchun ramka o'rganish uchun ushbu sessiyaga qo'shiling.
Ro'yxatdan o'ting
Virtual tadbir: CISO Forum 2026 Sammiti
10 va 11-noyabr, 2026
CISO'lar, yuqori darajadagi kiberxavfsizlik rahbarlari, amaliyotchilar, soha mutaxassislari va boshqa xavfsizlik rahbarlarini amaliy tajriba almashish va korporativ kiberxavfsizlik strategiyasini shakllantiradigan masalalarni o'rganish uchun birlashtirganimizda bizga qo'shiling.
Ro'yxatdan o'ting
Harakatdagi odamlar
Cequence Security Russ Schaferni CMO etib tayinladi.
Mona Harrington DHS'da Kiber integratsiya bo'yicha yordamchi direktor etib tayinlandi.
iCOUNTER Mark H. FitzPatrickni CFO etib tayinladi.
Harakatdagi odamlar haqida ko'proq
Mutaxassis fikrlari
AI dasturiy ta'minot xavfsizligining kaliti tezlik emas, balki yetuklik
Sizning dasturchilaringiz AI qabul qilish shkalasida qayerda joylashganligi sizning xavfsizlik xavfini qanday hal qilayotganingizga haqiqiy ta'sir qiladi. (Matias Madou)
Zamonaviy kiberhujumlarga qarshi kurashda kontekst qirol
Kontekstual himoya xavfsizlik jamoalariga signallarni bog'lash, keyin nima kelishini oldindan bilish va tahdidlar kuchayishidan oldin ularni to'xtatishga yordam beradi. (Etay Maor)
AI hujum tezligini o'zgartirdi, xavfsizlik asoslarini emas
AI zaifliklarni aniqlash va ekspluatatsiya qilishni tezlashtirayotgani sababli, virtual yamoqlash hali ham himoya chuqurligi va kuchli ilova xavfsizligi asoslariga bog'liq. (Joshua Goldfarb)
Kelajak uchun katta rejalar tuzayotgan to'rtta kiber tahdid
- AI, ta'minot zanjiri fosh etilishi, kvant hisoblash va geosiyosiy ziddiyat xavfsizlik dasturlarini sinovdan o'tkazmoqda. Buzilishlarga tayyorgarlik kundalik operatsiyalarning bir qismiga aylanishi kerak. (Steve Durbin)
Oxiridan boshlang: Agentik tuzatishni qanday yoqish mumkin
Agentik tuzatish ishonch harakati emas. Biz tanish muammolarni tuzatish haqida gaplashmoqdamiz, noma'lum xavf haqida hukm chiqarish emas. (Nadir Izrael)
Data Breaches
Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’
In a regulatory filing, Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, a platform where certain clients can place test orders.
By
Associated Press
| October 23, 2026 (4:25 AM ET)
*
Medical laboratory operator Quest Diagnostics said it learned of a cyber breach of one of its systems this week, likely compromising some records for patients.
In a Thursday regulatory filing, Quest Diagnostics reported “unauthorized access” to its Quanum Lab Services Manager, a platform where certain clients can place test orders and receive or look up their results. The company said it discovered the hack on Wednesday and notified federal law enforcement.
How many patients and which particular records have been affected is still unknown. Quest Diagnostics said it believes “certain patient records” were accessed in the breach, but that the full scope remains under investigation.
The New Jersey-based company said it’s also working with external cybersecurity experts to assist in its response.
Quest Diagnostics has seen hacks impacting patient records before. In 2016, for example, the company said data including lab results and contact information of about 34,000 people was exposed in another online breach. And in 2019, other personal information belonging to about 11.9 million Quest patients was affected after a separate hack at American Medical Collection Agency, a billing collections service provider.
Cyberattacks are on the rise across industries. Beyond healthcare, other breaches have recently disrupted anything from supermarket chains to core education applications.
Advertisement. Scroll to continue reading.
Governments and companies worldwide are working more broadly on online security updates. Urgency erupted this week, after an AI-assisted discovery of vulnerabilities in a programming language called PHP, which is vital to 70% of websites globally.
Outages and limited service have continued for many as firms rush to patch those risks. But based on the company’s investigation, Quest Diagnostics confirmed to The Associated Press Thursday that its cyber breach was not related to the PHP issue.
Related: 970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach
Related: Hackers Steal 1.8 Million Records From Nikkei
Related: One Compromised Login Exposed Millions of California Students’ Records
Written ByAssociated Press
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
More from Associated Press
- Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on Facebook
- China Defends DeepSeek After US Ban of Its AI From Government Systems
- Ex-OpenAI Worker Accused of Bugging Conference Room Planned to Fly to Saudi Arabia, Prosecutors Say
- Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company Say
- OpenAI Fires 3 Safety Researchers in Dispute Over AI Risks
- Personal Information for Over 1 Million People Stolen in a Cyberattack on Arizona’s Court System
- Trump Names National Intelligence Director Jay Clayton to Lead a New Federal AI Task Force
- FTC is Investigating OpenAI and Anthropic Over Possible Risks to Consumers
Latest News
- Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave
- In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware
- Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
- China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
- Attackers Exploit Third Arista VCO Zero-Day in Four Months
- 11 Million Impacted by Capcom Data Breach
- LiteLLM Compromised in Fresh Supply Chain Attack
- Atlassian Patches 75 Flaws in Data Center and Server Products
Trending
Tech and Security Companies Respond to PHP2Shell Vulnerabilities
China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware
PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors
PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws
Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’
Signal Vulnerability Lets Malicious Callers Block Hang-Ups
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
Webinar: The AI Access Risk Already in Your Google Workspace
October 19, 2026
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
Register
Virtual Event: CISO Forum 2026 Summit
November 10 & 11, 2026
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
Register
People on the Move
Cequence Security has appointed Russ Schafer as CMO.
Mona Harrington has been named Assistant Director for Cyber Integration at DHS.
iCOUNTER has appointed Mark H. FitzPatrick as CFO.
More People On The Move
Expert Insights
*
The Key to AI Software Security Isn’t Speed, It’s Maturity
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)
Context Is King in the Fight Against Modern Cyberattacks
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.(Etay Maor)
AI Has Changed Attack Speed, Not Security Fundamentals
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.(Joshua Goldfarb)
Four Cyber Threats Harboring Big Plans for the Future
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.(Steve Durbin)
Begin at the End: How to Enable Agentic Remediation
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.(Nadir Izrael)