The lab is up and the count is not

The ordering screen is back. The patient count is still a blank.

Quest Diagnostics learned of unauthorized access to Quanum Lab Services Manager on 21 October, told federal law enforcement, and filed. Clients use that system to place tests and to look up results. As of 19:00 Eastern on the 23rd the company says the incident is contained, Quanum is restored, and the systems it paused as a precaution — Essential Insights, LabHQ — had no data accessed. Direct LIS and EMR interfaces were never in this path. Core operations, it says, were not materially disrupted.

What it will say about the file: some patient data in Quanum was accessed. Personal information and patient records. PHI and PII, yes. The specific fields, and how many people, are still the investigation. Affected patients and providers will be mailed when that look finishes. Credit monitoring is promised in that letter, not before it.

The marketing page says about 500,000 clinicians use Quanum. That is the door’s user base. It is not a row count. A 2026 case study on the same site talks about one health system with more than six million patients. Do not paste either number onto this 8-K. The 2019 incident, 11.9 million records, is a different year. Quest also said, in the FAQ, that this one is not the PHP problem from last week.

What “certain patient records” will be asked to cover

It will be briefed as every Quest result in North America. The company has not said that. It will be briefed as 2019 again. It is not. A restored portal is evidence about the lab’s queue. It is not a finding that the record came back.

If you are a Quest patient, wait for their letter before you treat a screenshot as your row. A mail that already knows a test from last month is the next page if it is. The leak-site sentence, if one arrives, is not. Providers who only order through an EMR are in a different interface until Quest names them.

The lab is up. The count is the incident they have not issued.