Quest 数据泄露折射医疗集中式系统风险
Quest's breach last week is a symptom of a disease in healthcare: one centralized server, thousands of providers with access, and millions of patients records.
Rohan Paul 认为 Quest 上周的泄露暴露了医疗行业集中式服务器的结构性问题：一个系统接入数千家机构、承载数百万患者记录。他列举 2019 年 Quest 计费供应商被入侵 8 个月致 1190 万患者数据暴露、2024 年 Synnovis 遭勒索攻击致伦敦多家医院数千次预约和手术取消，以及 2026 年 10 月 21 日 Quest 发现 Quanum LSM 遭未授权访问后关停系统、改用纸质申请单且未公布受影响人数。他引用数据称 2025 年向 HHS 报告 697 起大型医疗数据泄露，影响约 6100 万人，医疗行业单次泄露平均成本 742 万美元、平均需 279 天发现和处置。
查看原帖今天，我们推出 Concurrence 的新篇章，也是迈向超级智能护理的全球最大跨越。 13 岁那年，我因癌症失去了母亲，而这场癌症本应更早被发现。 我们正在构建一个系统，能够及时预见每位患者的未来，从而改变结局 https://t.co/MOkLgjFqs8
查看原文
Today, we’re introducing the next chapter of Concurrence and the world’s greatest leap toward Superintelligent Care. When I was 13 I lost my mom to cancer that should’ve been caught earlier. We’re building a system that sees every patient’s future in time to change the outcome https://t.co/MOkLgjFqs8
正文
Quest's breach last week is a symptom of a disease in healthcare: one centralized server, thousands of providers with access, and millions of patients records.
→ 2019: a billing-collections vendor was breached for 8 months. 11.9M Quest patients were exposed.
→ 2024: ransomware hit Synnovis, the pathology lab behind several London hospitals. Thousands of appointments and procedures were cancelled. A year later, King's College Hospital confirmed the attack contributed to a patient's death. One factor: a long wait for a blood test result.
→ Oct 21, 2026: Quest found unauthorized access to Quanum LSM, the platform doctors' offices use to order labs and see results. It shut the system down and told offices to use paper requisitions. It still hasn't said how many patients were affected.
In 2025, 697 large health data breaches were reported to HHS, affecting ~61M people. Healthcare has been the most expensive industry for breaches 14 years running: $7.42M per breach on average, and 279 days to identify and contain one (IBM).
When one system has access to everything, it becomes a major weakness. One breach & everything is gone.
Patient records aren’t eggs we should keep in one basket. I like seeing systems that keep data at the hospital.