Quest Diagnostics class action lawsuits overview:
- Who: Multiple class action lawsuits were filed against Quest Diagnostics Inc.
- Why: The plaintiffs claim Quest failed to protect patient records accessed in a breach of its Quantum Lab Services Manager (LSM) system.
- Where: The class action lawsuits were all filed in New Jersey federal court.
Several class action lawsuits have been filed against Quest Diagnostics following a data breach that exposed patient records in a system healthcare providers use to order lab tests and access results.
At least seven Quest Diagnostics class action lawsuits were filed on Oct. 22 and 23, after Quest discovered unauthorized access to its Quantum Lab Services Manager system on Oct. 21.
The plaintiffs claim Quest failed to properly secure and encrypt the sensitive personal and health information patients provided to receive lab testing.
“The data breach occurred in part because [Quest] stored the plaintiff’s and class members’ private information in an unencrypted, Internet-accessible environment,” according to plaintiff Ann OBrien.
Quest has confirmed only that protected health information (PHI) or personally identifiable information (PII) was involved in the breach.
Plaintiffs Maliaka Johnson and two others claim the accessed records likely include names, dates of birth, contact information, health insurance information and lab test results. OBrien claims the exposed data may also include driver’s license and credit card numbers, while two other complaints claim Social Security numbers were compromised.
Quest has not said how many patients were affected by the Quest Diagnostics data breach. The complaints estimate the affected group at anywhere from more than a thousand to tens of thousands of people.
Johnson also argues Quest was on notice from prior incidents, including a 2021 ransomware attack on its subsidiary ReproSource Fertility Diagnostics that affected about 350,000 patients.
The lawsuits seek to represent nationwide classes of individuals whose private information was compromised in the data breach. Plaintiff Giga Romero also proposes a subclass of class members domiciled in Colorado.
Quest Diagnostics data breach lawsuits claim patient data is on dark web
Two plaintiffs claim, on information and belief, that the stolen data has already reached criminals. Plaintiff Lana Luciano claims her private information is available on the dark web. Plaintiff Eunice Garcia Ayala alleges inadequately trained employees opened files containing ransomware.
Ayala claims she now spends about 2.5 hours a week monitoring her accounts and receives excessive spam calls on the phone number she gave Quest. Romero says she spent more than three hours responding to the breach. She also notes the National Security Agency warned of two critical PHP software vulnerabilities on the same day Quest discovered the intrusion, although she does not allege they caused it.
The lawsuits bring claims including negligence, breach of implied contract and unjust enrichment. All seven plaintiffs demand a jury trial and seek damages. Most also seek injunctive relief requiring Quest to improve its data security.
Quest said it paused access to Quantum LSM after discovering the incident, notified federal law enforcement and engaged outside cybersecurity experts.
The company says it will notify affected patients as required by law. It has not yet announced any credit monitoring or identity protection services, according to media reports.
Have you received a notice about the Quest Diagnostics data breach? Let us know in the comments.
The plaintiffs are represented by Edelson Lechtzin LLP, Kopelowitz Ostrow P.A., Carella Byrne Cecchi Brody & Agnello P.C., Milberg PLLC, Shamis & Gentile P.A., Ruta Soulios & Stratis LLP, Israel David LLC, Hall Attorneys P.C., Federman & Sherwood, and Lynch Carpenter LLP.
The Quest Diagnostics class action lawsuits are Johnson, et al. v. Quest Diagnostics Incorporated, Case No. 2:26-cv-13795; Vasey v. Quest Diagnostics Incorporated, Case No. 2:26-cv-13820; Boyker v. Quest Diagnostics Incorporated, Case No. 2:26-cv-13822; Luciano v. Quest Diagnostics Incorporated, Case No. 2:26-cv-13827; Romero v. Quest Diagnostics Incorporated, Case No. 2:26-cv-13837; OBrien v. Quest Diagnostics Incorporated, Case No. 2:26-cv-13847; and Ayala v. Quest Diagnostics Incorporated, Case No. 2:26-cv-13852, all in the U.S. District Court for the District of New Jersey.
Don’t Miss Out!
Check out our list of Class Action Lawsuits and Class Action Settlements you may qualify to join!
Read About More Class Action Lawsuits & Class Action Settlements:
One thought on Quest Diagnostics faces multiple class action lawsuits over lab data breach
I have had lab work done there.