Published · United States (federal)
HIPAABreach report
Patient Data Likely Accessed in Quest Diagnostics Hack
Quest Diagnostics told the SEC a cyberattack may have exposed patient health information, disclosed on 23 October 2026.
What happened
Quest Diagnostics, a Fortune 500 diagnostic testing firm, reported to the U.S. Securities and Exchange Commission that a recent hack likely accessed patient data. The breach was disclosed in a filing on 23 October 2026. No details on the number of records or specific data types were provided. The incident triggers HIPAA breach‑notification obligations and may prompt regulatory scrutiny. The company is assessing the scope and impact of the intrusion.
Why it matters
Healthcare entities handling protected health information must verify that their detection and reporting processes meet HIPAA timelines, as regulators will scrutinize similar incidents closely.
Business impact
Potential OCR investigation and mandatory notifications to affected individuals could increase legal exposure and operational costs.
Drafted automatically from the sources below. How we write summaries
Does this summary seem wrong?What to check
Review incident‑response planHigh priority
Confirm that breach detection, containment, and reporting steps align with HIPAA requirements.
Notify OCRHigh priority
Prepare and submit a breach notification to the HHS Office for Civil Rights within 60 days of confirming the breach.
Communicate with affected patientsMedium priority
Draft clear breach notices for individuals whose PHI may have been accessed, as required by HIPAA.
3 sources
- The HIPAA JournalTrade press(opens in a new tab)
Patient Data Likely Accessed in Quest Diagnostics Hack
- Healthcare Dive - Latest NewsTrade press(opens in a new tab)
Quest Diagnostics hit by cyberattack
- SecurityWeekTrade press(opens in a new tab)
Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’
Discussion
No comments yet. Start the discussion.