Quest Diagnostics, one of the nation’s largest independent laboratory companies, confirmed this week that hackers gained unauthorized access to an online platform that doctors use to order tests and view patient files, raising fears that sensitive medical records of millions of Americans were exposed.

What Quest Has Confirmed

The New Jersey-based company disclosed the intrusion on Friday. It said the breach affected the Quanum Lab Services Manager, a web-based tool that lets physician offices, hospitals and clinics order lab tests, receive results and look up patient files. Quest shut the system down after discovering the problem on Wednesday.

In a statement, the company said it believes some patient data within the platform was accessed, but that its other systems were not affected. Quest said it is investigating to determine exactly which information was taken.

The company has not said how many people were affected or which records were exposed. It also has not explained how the attackers got in.

What Information Is at Risk

Quest said the compromised records include personal information from its clients, along with protected health information. That category covers patient records, diagnostic details and billing data, the type of information federal privacy law requires healthcare organizations to guard closely.

Quest is working with outside cybersecurity experts and law enforcement agencies to contain the incident and assess the damage. The company said its normal operations continued without disruption, and doctors can still order tests without the Quanum system.

Until Quest finishes its review, patients and the medical offices that rely on the platform have no way to know whose information was involved.

A Company Touching Millions of Lives

The scale of Quest’s reach explains the concern. Approximately 85 million Americans have their lab work handled by the company, which performs more than 3,500 different tests. These include infectious disease screening, cancer screening, genetic testing, allergy panels, women’s health exams and routine blood work.

Quest processes hundreds of millions of tests each year. It serves roughly half of the doctors and hospitals in the country and one in three American adults in the healthcare system.

Because so many patients and providers depend on its services, even a limited breach of one platform could carry serious consequences for individuals whose personal and medical details are now in unauthorized hands.

A Second Major Incident

This is not the first time patient data tied to Quest has been compromised. In 2019, a breach at a third-party billing company exposed the financial and medical information of nearly 12 million people. That incident involved a vendor rather than Quest’s own platform, but it affected the same patient base.

The repeated incidents highlight a persistent weakness in the healthcare industry. Hospitals, labs and clinics hold some of the most private information Americans have, and they depend on a web of online tools and outside vendors that criminals increasingly target.

What Patients Should Watch For

Quest has not yet said whether it will notify affected individuals or offer protective services such as credit monitoring. Patients who have used Quest for lab work should watch their medical bills, insurance statements and financial accounts for unfamiliar activity.

They should also be cautious about unexpected calls, emails or text messages that reference their health or testing history, since scammers often use stolen medical details to appear legitimate.

As the investigation continues, the key unanswered questions are how many patients were affected, what specific data was taken and who carried out the attack.