Quest Diagnostics is the latest medtech company to disclose that it was hit by a cyberattack.
The testing services company identified unauthorized access to its Quanum Lab Services Manager system on Wednesday, according to a filing with the Securities and Exchange Commission. Quest’s Quanum LSM system is used by certain clients to place test orders as well as to receive and look up results. Quest paused access to the system upon discovering the incident.
While Quest is still determining the full scope of the attack, it believes that an unauthorized party accessed certain patient records. Quest, in the filing, did not detail what patient records were accessed or how many records were involved.
In an update posted to its website, Quest said that patient health information or patient identifiable information was part of the unauthorized access, although the company is still determining specific data affected.
Quest said the incident has not materially disrupted its operations or ability to serve patients.“Core business operations are not impacted and remain up and running,” Quest said on its website.
The company has notified federal law enforcement authorities and engaged external cybersecurity experts to assist in the investigation and the response.
Quest did not provide additional information Thursday during a third-quarter earnings call.
Cyberattacks have been an ongoing problem for the medical device industry for much of the year. Companies like Stryker, Boston Scientific, Medtronic and Abbott have all disclosed cyberattacks, as have Intuitive, iRhythm and AdaptHealth.
While some attacks have involved patient data exposure, some have had significant impacts on companies’ businesses. Stryker and Boston Scientific both had attacks that disrupted or shut down operations like manufacturing, ordering and shipping. Stryker’s attack ate into its first-quarter results, and Boston Scientific has not yet reported how large of an impact the attack had on its business.
At a press event at The MedTech Conference this week, AdvaMed Chairman Mick Farrell said the lobby is looking to create standards for the industry around cybersecurity, privacy and interoperability.
