Quest Restores Quanum as Patient-Data Inquiry Continues
Quest says its lab-ordering system is back online after unauthorised access. That restores service, but does not yet tell individual patients whether their records were affected.
The short version
What you need to know
- Quest says Quanum LSM and precautionarily paused systems have been restored; its investigation into patient information continues.
- The notice says personal information and patient records were affected, but does not identify the full patient population or specific data fields.
- Use established provider contact details to verify any notification. Restoring a service does not undo access to records.
What has changed
In an update marked 7pm ET on 23 October, US laboratory company Quest Diagnostics says it has remediated unauthorised access to its Quanum Lab Services Manager system and restored access. Certain healthcare clients use that system to order tests and receive or look up results. Systems paused as a precaution have also been restored, according to the company.
This is a service-restoration update, not an all-clear on patient privacy. Quest says it is still investigating the full scope of the unauthorised access, including patient information. Its patient FAQ says personal information and patient records were affected, while the exact information and affected patients are still being identified. The notice does not give an affected-patient count.
Quest says its core business operations remained running and direct-customer laboratory interfaces and electronic medical record connections were not affected. It also says no data was accessed in the other systems that it temporarily paused. Those are the company's statements about scope, not evidence that every patient's record was unaffected.
Why restoration and notification are different
A working portal answers whether a service is available. It does not answer whose information was accessed before the incident was contained. Patients should avoid assuming either that everyone who has ever used Quest is affected or that restored access means there is no remaining privacy concern.
Quest says it will notify patients and providers determined to be affected. Its FAQ says notification letters will describe available resources, including credit and identity monitoring. That is not a reason to enrol through an unsolicited message now: use the official notice and any later verified instructions. This is a US laboratory incident, not a general warning that NHS patient records have been exposed.
What patients can do now
Check the official Quest incident page for updates rather than relying on an earlier headline saying the system is still unavailable. If a message claims to offer breach assistance, open the provider's established website yourself or contact it using details you already trust. Do not give a caller passwords, one-time codes or payment to unlock supposed protection.
Keep any genuine notification so you can follow advice specific to the information involved. If you have concerns about a scheduled test or result, ask your existing healthcare provider through its usual channel; this report is not advice to cancel care. Suspicious messages are a foreseeable risk after a public breach announcement, not a confirmed phishing campaign documented in Quest's notice.
Why a VPN is not the remedy
A VPN encrypts the connection between your device and the VPN service. It cannot control access inside a laboratory's systems, retrieve already accessed records or authenticate someone claiming to offer breach support. For this incident, verified communications and any patient-specific notification matter more than changing your connection settings.
Primary reading
Sources and further reading
We add plain-English context and practical advice. These links let you inspect the underlying reporting, research and official guidance directly.