Medical testing giant Quest Diagnostics discovered \u201cunauthorized access\u201d to its systems on Wednesday, according to an SEC filing Thursday. The company believes attackers accessed patient records but has not disclosed the potential scope of the breach.<\/p>\n
The unauthorized access occurred in the company\u2019s Quanum Lab Services Manager, which is used by clients to place orders and check test results. The company is working with law enforcement to investigate the hack according to the 8-K filing<\/a>, which is mandated by law when a cyberattack occurs.<\/p>\n \u201cWhile the full scope of unauthorized access remains under investigation, at this time the Company believes that an unauthorized party accessed certain patient records,\u201d the filing explained. \u201cThis incident has not materially disrupted the Company\u2019s business operations or its ability to serve patients.\u201d<\/p>\n Quest Diagnostics didn\u2019t immediately respond to questions about how the intrusion was discovered. It\u2019s not clear if the breach was related to the critical vulnerabilities discovered in the PHP programming language, first warned about on Tuesday<\/a>, which allow hackers to fully take control of affected servers.<\/p>\n Patches to fix the issues were released Wednesday, and systems administrators around the world have rushed to fix them, sometimes even pulling critical websites offline<\/a> while they work to address the problems. The PHP flaws were publicized widely on social media before patches were released, giving hackers a head start.<\/p>\n There have been millions of hacking attempts since the discovery of the flaws, according to Cloudflare CEO Matthew Prince, who tweeted about the issue on Wednesday.<\/p>\n \u201cIn the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it,\u201d tweeted Prince<\/a>. \u201cThat jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.\u201d<\/p>\n Again, it\u2019s unclear if the unauthorized access at Quest Diagnostics is related to the PHP issues, but those vulnerabilities are obviously front of mind as the world races to fix these bone-headed mistakes. And as companies turn their attention to cybersecurity, it\u2019s entirely possible some will discover unrelated breaches that went unnoticed.<\/p>\n As Reuters notes<\/a>, there have been other high-profile attacks on the health care sector recently that have nothing to do with the PHP issue. Some hackers are motivated by extracting large sums of money, while others are working on behalf of state actors with their own motivations.<\/p>\n For example, U.S. medical equipment company Stryker experienced a global outage<\/a> in March after the Iran-linked hacking group Handala claimed responsibility. The hackers said it was \u201cin retaliation for the brutal attack on the Minab school,\u201d a reference to the U.S.-led bombing of Iran and attack on a school that killed 168 people<\/a>, most of them children, at an all-girls elementary school.<\/p>\n Gizmodo will update this article when we hear back from Quest Diagnostics.<\/p>\n","protected":false},"excerpt":{"rendered":"Medical testing giant Quest Diagnostics discovered \u201cunauthorized access\u201d to its systems on Wednesday, according to an SEC filing…\n","protected":false},"author":2,"featured_media":654078,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34],"tags":[163,521,85,46,35178],"class_list":["post-654077","post","type-post","status-publish","format-standard","has-post-thumbnail","category-healthcare","tag-health","tag-healthcare","tag-il","tag-israel","tag-php"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts\/654077","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/comments?post=654077"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts\/654077\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/media\/654078"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/media?parent=654077"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/categories?post=654077"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/tags?post=654077"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}