Class Action Filed
Quest Diagnostics Data Breach Class Action
Quanum LSM · Patient privacy
On October 23, 2026, Hall Attorneys, P.C., Milberg, PLLC, and Federman & Sherwood filed a putative class action against Quest Diagnostics Incorporated over unauthorized access to patient records in Quanum Lab Services Manager (LSM). The complaint alleges failures to safeguard confidential patient information and seeks damages for affected patients.
What happened?
Quest’s October 22, 2026 Form 8-K says it learned of unauthorized access to Quanum LSM on October 21 and believed certain patient records had been accessed. Quanum LSM is used by healthcare clients to place laboratory orders and obtain and search test results. October 21 is the reported discovery date, not a confirmed date when the intrusion began.
The complaint cites Quest’s October 22 notice acknowledging protected health information (PHI) or personally identifiable information (PII) was involved and that Quest paused access to Quanum LSM. The affected-person count and specific data fields remained under investigation at filing. The complaint does not establish that every Quest patient was affected or that any particular person’s Social Security number, financial information, or test result was accessed.
What does the lawsuit allege?
The complaint alleges Quest failed to maintain reasonable technical safeguards restricting access to confidential patient records to authorized persons and purposes, and breached an undertaking to preserve the confidentiality of information entrusted for laboratory services.
The plaintiff, Giga Romero, alleges on information and belief that her records were among those accessed. She alleges loss of medical confidentiality, more than three hours spent responding to the incident, and emotional distress. She also alleges an unsuccessful attempt to retrieve her testing history through MyQuest; that experience does not establish a separate MyQuest breach. Quest’s affected-record and investigative records will determine the particular information involved.
Who is included in the proposed classes?
The complaint seeks certification of a Nationwide Class of natural persons who resided in the United States when their personally identifiable information or protected health information was accessed by an unauthorized person in the Quanum LSM incident disclosed on October 22, 2026. It also proposes a Colorado Subclass of members domiciled in Colorado when their information was affected.
These are proposed classes. No class has been certified, and having a Quest test or account does not, by itself, establish that your information was involved. The complaint identifies affected-record inventories, forensic and access records, and notification records as evidence for determining class membership.
Claims and requested relief
The complaint pleads three counts. It invokes HIPAA safeguards as a standard of care for state-law claims; it does not assert a private federal enforcement claim under HIPAA.
- Negligence on behalf of the plaintiff and the proposed Nationwide Class or, alternatively, the Colorado Subclass.
- Negligence per se under Colorado law for the plaintiff and the proposed Colorado Subclass, pleaded as an alternative basis for negligence.
- Breach of implied-in-fact contract for the plaintiff and the proposed Nationwide Class or, alternatively, the Colorado Subclass.
- Requested relief includes class certification, compensatory damages, nominal contract damages where compensatory damages are not established, interest, costs, and attorneys’ fees where authorized, without duplicate recovery. A jury trial is demanded.
Who should contact Hall Attorneys?
Patients who received a Quest or healthcare-provider notice about Quanum LSM, were told their information may have been accessed, or experienced related concerns may request a case review. You do not need a breach notice to contact us. Suspicious activity alone does not establish a connection to this incident.
- Keep security notices, envelopes, emails, provider correspondence, and account alerts.
- Preserve suspicious messages and records of related expenses or time spent responding.
- Do not search for, download, or share allegedly stolen patient information. Keep only records you are authorized to access.
Frequently asked questions
Has Hall Attorneys filed a Quest Diagnostics lawsuit?
Yes. Hall Attorneys, P.C., Milberg, PLLC, and Federman & Sherwood filed Giga Romero v. Quest Diagnostics Incorporated, No. 2:26-cv-13837, in the District of New Jersey on October 23, 2026. The case concerns unauthorized access to patient records in Quanum LSM.
Was my information involved in the Quest breach?
The specific data affected and affected-person count remained under investigation at filing. A Quest test or MyQuest account alone does not establish exposure. Preserve any notice you receive and request a review if you have related concerns.
Is there a settlement or a certified class?
No settlement or class certification is announced on this page. The complaint contains allegations only; no findings have been made and no class has been certified. No recovery is guaranteed.
Should I send medical records with my inquiry?
Do not send medical records, diagnoses, test results, Social Security numbers, passwords, or complete financial-account information in an initial email or website submission. Provide your name, state, a safe contact method, and a brief description of your concern. If sensitive records are needed, the firm will discuss an appropriate way to provide them.
Request a case review
Provide your name, state of residence, a safe contact method, and whether you received a Quest or provider notice about Quanum LSM. Briefly describe your concern, related costs, or time spent responding. Let us know whether it is safe to leave a voicemail.
Do not send medical records, diagnoses, test results, Social Security numbers, passwords, or complete financial-account information in an initial inquiry. If sensitive records are needed, we will discuss an appropriate way to provide them.
Attorney Advertising. Responsible attorney: Nicholas Hall, Hall Attorneys, P.C., Edna, Texas. Hall Attorneys is not affiliated with Quest Diagnostics. The complaint contains allegations only; no findings have been made and no class has been certified. This page provides general information, not legal advice. Contacting the firm or submitting information does not create an attorney-client relationship. No outcome is guaranteed.