Quest Diagnostics suspended access to its lab portal after discovering unauthorized access Wednesday, cutting off one way healthcare providers order tests and retrieve patient results.
The company provides medical laboratory testing for patients and healthcare providers. Headquartered in Secaucus, New Jersey, it disclosed the intrusion Thursday, identifying the affected platform as Quanum Lab Services Manager.
Quest notified federal law enforcement and brought in outside cybersecurity experts. Its filing said the incident had not materially disrupted business operations or its ability to serve patients.
The company’s incident notice and FAQs acknowledge access to patients’ health and personal information. Quest is still identifying the affected patients and records and says it will notify those affected.
Providers could use an alternative online platform or fax paper orders to Quest. Results remained available through the alternative platform, by telephone or by electronic fax.
Quest restricted two other platforms as a precaution, saying no data was accessed in either. Direct connections through clients’ laboratory and electronic medical record systems remained available.
Chip in once
If this reporting helped you, a one-time tip helps cover hosting, tools and future investigations.
Support us monthly
A small monthly pledge keeps independent coverage and our reader tools online for everyone.
The disruption follows another interruption to online access to medical information this week. University Hospitals in Ohio disconnected systems after unusual server activity, directing patients to telephone alternatives for results and appointments while MyChart was unavailable.
Quest has not publicly identified an attacker or explained how the unauthorized party entered Quanum.
Quest’s Friday notice said unauthorized access had ended, but service restrictions remained. The company had anticipated restoring full functionality as soon as Friday; the notice did not confirm that it had done so.
