Quest Apartment Hotels is investigating a security breach after a third party accessed the personal information of some customers.
A spokesperson said the company identified unauthorised access to a database system on Monday “arising from a vulnerability through a third-party service provider”.
The hotel chain operates in more than 120 locations in Australia , New Zealand and Fiji .
“We immediately took steps to contain the incident and secure the affected systems,” the spokesperson said.
“The incident has been contained, and remediation work has been completed.”
The spokesperson said a forensic investigation confirmed names, email addresses and other details from records before June 2025 were potentially accessed.
“A small number of data entries also involve date of birth,” the spokesperson said.
“We have contacted those we have identified as potentially affected to notify them and provide support.
“We will continue to do so if our investigation identifies any further impact.
“If you do not receive a notification from us, it is unlikely that your personal information has been affected.
“The security of our guests’, staff and partners’ information remains our absolute priority.”
The company said it would work with privacy and cybersecurity authorities as its investigation progresses.
The hotel chain is the latest in a string of businesses to be caught up in cybersecurity incidents.
Australian furniture giant Nick Scali is investigating a cyberattack which forced the $1.4 billion business to take some of its systems offline.
Australian telehealth provider Updoc was hit by data breach early in August .
The healthcare platform confirmed some information of customers had been exposed after “a brief period of unauthorised access to a third-party system that we use to support our operations”.
Last month, Origin Energy confirmed the personal information of some of its customers was stolen in a suspected cyber hack .
It is understood the incident impacted 900,000 past and present customers.
a tip-off, video or photo with us
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
