https://www.abc.net.au/news/2026-08-19/quest-apartment-hotels-data-security-breach/107053574
Quest Apartment Hotels has informed customers of a data security breach involving unauthorised access to a database system, with the incident traced to a vulnerability introduced through a third-party service provider. The breach was identified on 17 August 2026, and Quest states it immediately took steps to contain the incident and secure the affected systems. The compromised data relates to customer records from before June 2025 and includes full names, email addresses, and other contact details, with a small number of entries also containing customers’ dates of birth. Quest notified customers of the breach via email, and social media users across Facebook and Reddit confirmed receiving the communications overnight. The company has also notified the Office of the Australian Information Commissioner and the Australian Cyber Security Centre in accordance with its regulatory obligations.
The company advised customers not to click on unexpected links or open attachments, even if they appeared to originate from Quest, as a precaution against follow-on phishing or scam activity exploiting the exposed contact details. The full scale of the breach had not been disclosed at the time of reporting.