Understand this story
On October 28, 2026, Rohan Paul put forward the judgment that Quest's data breach last week exposed a structural problem with centralized servers in the healthcare industry: a single system connected to thousands of institutions and carrying millions of patient records. He cited the 2019 breach of Quest's billing vendor, which went undetected for 8 months and exposed the data of 11.9 million patients; the 2024 ransomware attack on Synnovis, which caused thousands of appointment and surgery cancellations at multiple London hospitals; and Quest's discovery on October 21, 2026 of unauthorized access to Quanum LSM, after which it shut down the system, switched to paper requisition forms, and did not disclose the number of people affected. He also cited data stating that 697 large healthcare data breaches were reported to HHS in 2025, affecting about 61 million people, and that the average cost of a single breach in the healthcare industry is $7.42 million, with an average of 279 days needed to detect and address it.
AI-generated from public reports
Latest development · Report
Quest Data Breach Reflects Risks of Centralized Healthcare SystemsDevelopments
1 confirmed developments
Reports and discussion timeline
Browse reports and discussion by time. Their evidence levels remain distinct.
Oct 28
Rohan Paul
Quest Data Breach Reflects Risks of Centralized Healthcare Systems
Rohan Paul argues that last week's Quest breach exposed structural problems with centralized servers in the healthcare industry: a single system connects thousands of institutions and holds millions of patient records. He cites the 2019 breach of Quest's billing vendor, which went undetected for 8 months and exposed the data of 11.9 million patients; the 2024 ransomware attack on Synnovis, which caused thousands of appointment and surgery cancellations at multiple London hospitals; and the October 21, 2026 incident in which Quest discovered unauthorized access to Quanum LSM, shut down the system, switched to paper requisition forms, and did not disclose the number of affected individuals. He cites data showing that 697 large healthcare data breaches were reported to HHS in 2025, affecting approximately 61 million people, and that the average cost of a single healthcare breach is $7.42 million, with an average of 279 days needed to detect and resolve it.