Quest Apartment customers urged to check passports and licences after major data breach

Quest Apartments customers have been advised to check their passports and driver’s licences with authorities after identification numbers were among information compromised in a data breach.

The warning comes after Quest’s investigation into a data breach, first revealed in August, found additional personal information had been exposed.

The company initially told affected customers information dating from before June 2025, including names, email addresses and other contact details, had been accessed.

The accommodation provider has now confirmed passport and driver’s licence numbers were among the additional information compromised, alongside credit card numbers, including CVV numbers, and other personal information.

Affected customers were told in a text message forensic analysis had identified further categories of information involved in the incident.

Information relating to 1,991,613 customers was affected in the breach.

Quest said 104,268 records containing a passport and/or driver’s licence number were affected, although it stressed no scanned copies of the identification documents were compromised.

Emails sent to affected customers initially appeared to advise them to seek replacement documents.

“If your driver’s licence number was affected, consider contacting your local road authority about obtaining a replacement licence,” the emails, seen by the ABC , said.

“If your passport number was affected, contact the Australian Passport Office (or the relevant issuing authority for non-Australian passports) to discuss whether your passport should be flagged or reissued.”

When contacted by 7NEWS.com.au, the company said its advice had always been for affected customers to check with the relevant issuing authorities as a precaution.

It also pointed customers to advice from the Australian Passport Office stating there is no need to replace passports affected by the breach.

The company said it continued to work with relevant authorities to ensure customers affected by the third-party supplier data breach were kept informed.

Quest operator The Ascott Limited Australasia managing director David Mansfield apologised to affected customers on behalf of the company.