{
  "id": 1879787,
  "title": "Australian hotel chain leaks guests’ PII after breach at third-party database operator",
  "url": "https://urgent.news/2026/08/19/australian-hotel-chain-leaks-guests-pii-after-breach-at-third-party-1879787",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-08-19T02:16:03.000Z",
  "source": {
    "name": "The Register Science",
    "slug": "the-register-science",
    "url": "https://www.theregister.com/cyber-crime/2026/08/19/australian-hotel-chain-leaks-guests-pii-after-breach-at-third-party-database-operator/5289341"
  },
  "original_language": "en",
  "account": "Australian aparthotel chain Quest disclosed a breach of customer data in an email to its clientele. The email, titled \"Important Security Update Regarding Your Quest Data,\" notified recipients of unauthorized access to a database system and the subsequent containment measures. The breach originated from a vulnerability in Quest's third-party service provider. The leaked information pertained to records from before June 2025 and encompassed guests' full name, email, and other contact details. Quest disclosed that a limited number of data entries also contained Date of Birth, increasing the risk of identity fraud for those affected. The company, however, refrained from revealing the third-party responsible for the breach, the method of the breach, or the exact number of customers impacted. Quest, which has been in operation for over three decades, manages more than 120 properties, primarily in Australia, with additional locations in New Zealand and Fiji. The company has reached out to all affected guests, addressed the breach, and initiated forensic investigations and external cyber security and privacy adviser engagements. This report is a developing story, and The Register will provide updates as additional information becomes available.",
  "summary": "Unknown parties know where you stayed last summer, down under, across 120 Quest properties",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}