Tech brief

Quest Diagnostics Says Someone Accessed Patient Records: What to Do Now

Illustration: a lab test tube next to a clipboard of medical results, under a broken-open padlock.
On this page · 2 sections
  1. What to do now
  2. Sources

If you've had blood work or other lab tests through Quest Diagnostics, keep an eye on your mail and be extra careful with anyone who contacts you about your test results.

What happened: In a filing with the U.S. Securities and Exchange Commission on October 22, Quest said it learned on October 21 that someone without permission got into its Quanum LSM system. That's a tool some of Quest's clients, such as doctors' offices, use to order tests and look up results. Quest says it believes the intruder accessed certain patient records.

What this means for you: Quest hasn't said how many people are affected or exactly what information was seen. It says it's still investigating, has told federal law enforcement and brought in outside security experts. It also says the incident hasn't seriously disrupted its business or its ability to serve patients.

Our read: Medical details make convincing bait for scammers, so the bigger risk right now is fake calls, texts and emails that mention your lab work.

What to do now

  • Don't trust surprise "Quest" messages. If someone calls, texts or emails about your results, a bill or this breach, don't click links or share your Social Security number, insurance details or card number. Hang up or close the message.
  • Go to the source yourself. Type Quest's website address into your browser, or call your doctor's office using a number you already have.
  • Watch for a real letter. Companies usually notify people once they know who's affected. Quest hasn't said when that will be.
  • Check your insurance statements. Look for tests or visits you don't recognize, and tell your insurer if anything looks wrong.

We'll update this as Quest shares more.

Sources