Maine’s largest health system says its hospital laboratories are still running normally after the company that manages them disclosed an intrusion. Quest Diagnostics told regulators this week that an outsider reached its Quanum Lab Services Manager, the web platform where client organizations place test orders and pull results.
Northern Light Health owns the hospital side and Quest owns the platform. Quest took over the system’s outreach lab work in 2023 and now runs laboratories at nine Northern Light hospitals plus the cancer center lab in Brewer. Chief marketing and communication officer Suzanne Spruce said Quest “has not indicated that any Northern Light Health associated data was involved,” and that additional monitoring is in place while the investigation continues.
The disclosure arrived Thursday, two days after Quest detected the activity and called in federal law enforcement. Quest says it believes “certain patient records” were reached but has not produced a count. No state breach filing has been posted for the hospital system.
For clinical leadership the open question is the ordering chain. When a third-party vendor operates the lab interface, patient notifications, credit monitoring and regulatory reporting all depend on the vendor’s forensic timeline, not the hospital’s. Northern Light is treating its own record as clean until Quest says otherwise.
Quest has been here before: a 2016 exposure touched 34,000 people, and the 2019 American Medical Collection Agency breach later reached about 11.9 million of its patients.
