The scope of the attack and exactly what data was compromised isn’t clear, only that some “personal information and patient records were affected.” Quest says its investigation is ongoing and it will alert impacted customers “as required by applicable law.” Oddly, as TechCrunch notes, the FAQ about the breach contains “noindex” code, making it difficult for customers to find.