Quest Apartment Hotels Data Breach Exposes Customer Personal Information

Quest Apartment Hotels is investigating a data breach that exposed personal information of customers, primarily from records predating June 2025. The breach was traced to unauthorized access via a vulnerability in a third-party service provider. Affected data includes full names, email addresses, and in some cases, dates of birth. The company notified impacted customers via email on August 19, 2026, and has reported the incident to the Office of the Australian Information Commissioner and the Australian Cyber Security Centre. Quest has contained the breach and is working with external cybersecurity advisers to investigate further. The identity of the third-party provider has not been disclosed, and the company has advised customers to be cautious of unexpected communications. The total number of affected customers remains unspecified.

Key Points: • Unauthorized access to customer data linked to a third-party vendor vulnerability. • Exposed data includes full names, email addresses, and some dates of birth. • Quest has notified affected customers and contained the breach.