Hotel chain Quest investigating customer data breach
Summarized and contextualized by DistantNews.
At a glance
- Quest Apartment Hotels is investigating a security breach that compromised customers' personal data.
- The compromised data includes names, email addresses, and contact details, with some entries also containing dates of birth.
- The breach originated from a vulnerability in a third-party service provider's system, and the company has notified relevant Australian authorities.
Quest Apartment Hotels is investigating a significant security breach that has exposed the personal data of its customers. The hotel chain confirmed the incident via an email sent to affected individuals.
On Monday, 17 August 2026, we identified unauthorised access to a database system arising from a vulnerability through a third-party service provider.
The compromised data primarily consists of customer records from before June 2025. This includes full names, email addresses, and other contact information. In a smaller number of cases, customers' dates of birth were also accessed. The company stated that the unauthorized access occurred on August 17, 2026, due to a vulnerability within a third-party service provider's database system.
We immediately took steps to contain the incident and secure the affected systems. The incident has been contained.
Quest has taken immediate steps to contain the incident and secure the affected systems, declaring the breach contained. The company has formally notified the Office of the Australian Information Commissioner and the Australian Cyber Security Centre about the breach. David Mansfield, managing director for Australasia at The Ascott Limited, Quest's parent company, expressed apologies for the incident and any resulting concern.
We are very sorry this has happened and for any concern it may cause. Protecting the privacy and security of our customers is extremely important to us.
Quest has assured customers that they will be contacted directly if the ongoing investigation uncovers further relevant information or if additional steps are required from them. The company also issued a warning advising customers to be cautious of unexpected links or attachments in emails, even if they appear to originate from the hotel. Social media platforms show that customers have indeed been receiving these notification emails.
We will contact you if our investigation identifies any further information that is relevant to you or if there are any additional steps you need to take.
Originally published by ABC Australia. Summarized and contextualized by our editorial team with added local perspective. Read our editorial standards.