Aussies’ personal info exposed in data breach

Quest Apartment Hotel customers have been caught up in a data breach with their personal information – including names, email addresses, and dates of birth – compromised.

Customers were advised unauthorised access to a database system was identified and steps were taken to contain the incident on Monday.

The company told customers forensic analysis identified customers’ names, emails and other contact details were compromised.

“On Monday … we identified unauthorised access to a database system arising from a vulnerability through a third-party service provider,” the statement read.

“We immediately took steps to contain the incident and secure the affected systems.

“The incident has been contained, and remediation work has been completed.”

“We have contacted those we have identified as potentially affected to notify them and

provide support, and we will continue to do so if our investigation identifies any further impact,” the statement read.

“If you do not receive a notification from us, it is unlikely that your personal information has been affected.”

The hotel chain said its working with privacy and cyber security authorities as their investigation progresses.

The statement said the accessed information related to records from before June 2025.

“Our investigation so far has confirmed that the information involved relates to records from before June 2025 and primarily involves names, email addresses, and/or other contact details. A small number of data entries also involve date of birth,” the statement read.

People were advised to be cautious of unexpected calls, texts or emails asking anything about personal information, click links or payments.

“Don’t click unexpected links or open attachments: This applies even if a message appears to come from Quest, your bank or another organisation you trust,” an email stated.

“We are continuing to assess the incident to identify any further improvements we can make on our systems going forward.