Quest data breach identified on 17 August 2026
Quest Apartment Hotels says it identified unauthorised access to a database system on 17 August 2026, after a vulnerability through a third-party service provider.
The company said the incident had been contained and remediation work completed. It said its investigation so far had confirmed the information involved related to records from before June 2025.
According to Quest Apartment Hotels, the data primarily involves names, email addresses and other contact details. A small number of data entries also involve date of birth.
Affected records from before June 2025
Quest Apartment Hotels said it had undertaken forensic analysis to establish what information was accessed and the extent of the incident. It also said it had engaged external cyber security and privacy advisers.
The company said it had contacted people it identified as potentially affected and would continue to do so if its investigation found any further impact. It said people who do not receive a notification are unlikely to have had their personal information affected.
Quest Apartment Hotels said it was continuing to work with relevant privacy and cyber security authorities as the investigation progresses.
