The Ledger

Quest Diagnostics got its lab-ordering portal back online Friday night, but the company now says in plain terms that patient data inside it was accessed. Quest’s Quanum notice, updated at 7:00 p.m. Eastern October 23, says Quanum Lab Services Manager (LSM) “has been securely restored and is available to clients,” that the unauthorized access was terminated and contained, and that two other systems paused as a precaution, Essential Insights and LabHQ, are also back, with no data accessed in them. The provider FAQ says “some patient data within Quanum LSM was accessed,” and the patient FAQ says personal information and patient records were affected. Quest has not said which data, how many patients, or when notices will go out; it says it will notify affected patients and providers and report to regulators. The company’s 8-K, dated October 22 with a report date of October 21, speaks only to operations: the incident “has not materially disrupted the Company’s business operations or its ability to serve patients.” It makes no determination about financial materiality. Who it hits: physician practices and health systems that order through the portal and now face resetting credentials (the notice warns of long help desk waits), plus Quest’s insurers and regulators once a count exists. So what: the operational question is answered, the cost question is not, and notification timelines are where state attorneys general and plaintiffs’ firms start. Confidence: High on restoration and the data-accessed language (company notice and filing); Low on scope, cost and timing.

HCA Healthcare holds its third-quarter call Tuesday, and the number to watch is the exchange coverage hit it widened in July. The nation’s largest hospital operator will host its call October 27 at 10:00 a.m. Eastern, per a Business Wire notice via finviz (supplemental; we could not confirm whether results post earlier). In its second-quarter 8-K, HCA reported revenue of $20.23 billion, up 8.7%, and said uninsured volume, mainly patients who lost Exchange coverage, cut second-quarter pre-tax income by about $400 million. It widened its 2026 Exchange headwind to $1.0 billion to $1.2 billion from $600 million to $900 million, and lowered 2026 guidance to adjusted EBITDA of $15.4 billion to $16.1 billion and diluted earnings per share of $28.70 to $30.50. Offsetting that, Medicaid supplemental payments added about $400 million in the quarter, mostly Florida, and HCA raised its full-year estimate for that benefit to $300 million to $500 million. Who it hits: every hospital operator and nonprofit system whose payer mix is moving toward uninsured, and the states whose supplemental payment programs prop up margins. So what: this is a preview, not results; we make no claim about what HCA will report. Confidence: High on the July figures (primary filing); Med on the call date.

THE DEAL SHEET

No new transactions spotted in the last 24 hours.

Scan covered company releases, SEC filings and trade press for October 22 to 24, a Saturday with no market session. No new health system bankruptcy, rating action, closure, or FTC or DOJ healthcare merger action dated in the window could be confirmed from a primary source. Two earlier deals have closings ahead, which are not new transactions: Prisma Health’s purchase of 36 urgent care centers from Novant Health is expected to close November 1, per the Hall Render weekly briefing (supplemental), and MultiCare and Samaritan combine November 1. A reported $600 million Angle Health financing carried conflicting dates between its trade write-up and the company’s own release, so we did not list it. Frontier scan this run: audiology and hearing aids, where Demant’s October 9 announcement raised its 2026 organic growth guidance to 7% to 8% after external hearing aid revenue rose 17% organically in the third quarter; it is outside the window, so no story ran.