Quest breach exposed passports, licences and card details of nearly 2 million customers
Summary
Quest says a breach involving a third-party provider’s vulnerability exposed information belonging to 1,991,613 customers, including passport, licence and credit card details. It advised affected customers to consider replacing documents.
Key points
- Quest said unauthorized access to its database occurred through a vulnerability in a third-party service provider.
- Forensic analysis found information relating to 1,991,613 customers was affected.
- The exposed information included passport and driver’s licence details, credit card numbers and CVV numbers, as well as other personal information.
- Quest advised affected customers to contact relevant authorities about flagging or replacing passports and licences.
- The Australian Department of Foreign Affairs and Trade said affected Australian passports remained safe to use for international travel.
- Customers told the ABC they cancelled cards or sought replacement documents after receiving updated breach notifications.
Article Details
- Victim Organization
- Quest Apartment Hotels
- Incident Type
- Data breach involving unauthorised access to a database through a vulnerability in a third-party service provider
- Data Types Exposed
- Full names
- Email addresses
- Other contact details
- Passport numbers
- Driver's licence numbers
- Credit card numbers
- CVV numbers
- Car registration details
- Dates of birth
- Other personal information
- Affected Records
- Information relating to 1,991,613 customers was affected, according to Quest.
- Operational Impact
- Affected customers were advised to consider replacing driver’s licences and contacting passport authorities about flagging or reissuing passports. Some customers reported cancelling or reissuing credit cards and documents.
- Ransom Or Extortion
- None reported
- Claim Status
- confirmed
People
David MansfieldManaging director for Australasia at The Ascott Limited; issued a statement acknowledging the incident's impact and apologising to affected individuals.Steven CooperQuest customer who said he was told that personal information, including credit card details and CVV numbers, had been exposed.