Quest Diagnostics披露Quanum实验室服务系统遭未授权访问 部分患者记录或受影响
【中文译文】
检测服务公司Quest Diagnostics成为最新一家披露遭网络攻击的医疗科技企业。公司相信有未授权第三方访问了患者记录。
根据公司向美国证券交易委员会（SEC）提交的文件，该公司于本周三发现其Quanum Lab Services Manager系统存在未授权访问。Quanum LSM系统用于部分客户下单检测、接收与查询检测结果。发现问题后，Quest暂停了该系统的访问。
Quest表示，目前仍在确定攻击的完整范围，但相信有未授权方访问了部分患者记录。公司在文件中未披露被访问的具体记录内容或涉及记录数量。
在官网发布的更新说明中，Quest表示患者健康信息或患者可识别信息属于此次未授权访问的范围，但具体受影响数据仍在确认中。
Quest强调，此次事件未对其运营或患者服务能力造成实质性中断。公司官网称：“核心业务运营未受影响，仍在正常运行。”
公司已通知联邦执法机构，并聘请外部网络安全专家协助调查和应对。在周四的三季度财报电话会议上，Quest未提供更多信息。
网络安全问题今年以来持续困扰医疗器械行业。Stryker、波士顿科学（Boston Scientific）、美敦力（Medtronic）、雅培（Abbott）以及Intuitive、iRhythm、AdaptHealth等公司此前均披露过遭网络攻击的情况。
部分攻击涉及患者数据泄露，另一些则对企业的业务造成重大影响。Stryker与波士顿科学的攻击事件均导致制造、订单处理与物流发运等运营中断或停摆：Stryker的攻击拖累了其一季度业绩，波士顿科学尚未公布该事件对其业务的影响规模。
本周在The MedTech Conference的新闻发布会上，美国先进医疗技术协会（AdvaMed）主席米克·法雷尔（Mick Farrell）表示，该协会正推动建立围绕网络安全、隐私与互操作性的行业标准。
【英文原文】
The testing company believes an unauthorized third party accessed patient records.
Quest Diagnostics is the latest medtech company to disclose that it was hit by a cyberattack.
The testing services company identified unauthorized access to its Quanum Lab Services Manager system on Wednesday, according to a filing with the Securities and Exchange Commission. Quest's Quanum LSM system is used by certain clients to place test orders as well as to receive and look up results. Quest paused access to the system upon discovering the incident.
While Quest is still determining the full scope of the attack, it believes that an unauthorized party accessed certain patient records. Quest, in the filing, did not detail what patient records were accessed or how many records were involved.
In an update posted to its website, Quest said that patient health information or patient identifiable information was part of the unauthorized access, although the company is still determining specific data affected.
Quest said the incident has not materially disrupted its operations or ability to serve patients. "Core business operations are not impacted and remain up and running," Quest said on its website.
The company has notified federal law enforcement authorities and engaged external cybersecurity experts to assist in the investigation and the response.
Quest did not provide additional information Thursday during a third-quarter earnings call.
Cyberattacks have been an ongoing problem for the medical device industry for much of the year. Companies like Stryker, Boston Scientific, Medtronic and Abbott have all disclosed cyberattacks, as have Intuitive, iRhythm and AdaptHealth.
While some attacks have involved patient data exposure, some have had significant impacts on companies' businesses. Stryker and Boston Scientific both had attacks that disrupted or shut down operations like manufacturing, ordering and shipping. Stryker's attack ate into its first-quarter results, and Boston Scientific has not yet reported how large of an impact the attack had on its business.
At a press event at The MedTech Conference this week, AdvaMed Chairman Mick Farrell said the lobby is looking to create standards for the industry around cybersecurity, privacy and interoperability.
