Quest Apartment Hotels, a major Australian hotel chain, has issued an urgent warning to customers following a data breach that may have compromised the personal data of more than a million guests. The company is currently investigating an incident that occurred earlier this week, which involved unauthorized access to a database system.
The breach originated from a vulnerability within a third-party service provider and impacted customer records up to June 2025. Compromised data includes full names, email addresses, and other contact details. A smaller subset of affected records also contained date of birth information. Reports suggest that up to 1.7 million guests may have had their names, emails, and/or contact details exposed.
Quest Apartment Hotels contacted affected customers on Tuesday night to inform them of the breach. The hotel chain stated that the incident has since been contained and that remediation work is complete. David Mansfield, general manager of The Ascott Limited Australasia, assured customers that forensic analysis is underway to determine the exact information accessed and the full extent of the incident. The company is collaborating with relevant privacy and cybersecurity authorities.
"We are very sorry this has happened and for any concern it may cause," Mansfield stated. "Protecting the privacy and security of our customers is extremely important to us." The hotel chain is implementing measures to reduce the risk of similar incidents in the future and is working with its third-party provider to address any necessary system improvements.
Customers have been advised not to click on unexpected links or open attachments, even if they appear to be from Quest or other trusted organizations. A Quest spokeswoman confirmed that all identified affected customers have been notified and provided with support. She indicated that if a customer has not received a notification, it is unlikely their personal information has been affected.
Quest Apartment Hotels, founded in 1988, operates 160 locations across Australia, New Zealand, and Fiji. The company has been fully owned by Singapore-based The Ascott Limited since 2021.