In the quiet hours of an August night, Quest Apartment Hotels discovered that a door had been left open — not by its own hand, but through a vulnerability in a third-party system that allowed an unknown intruder to walk through customer records stretching back years. The breach, disclosed on August 17, 2026, exposed the foundational details of personal identity — names, emails, contact information, and for some, dates of birth — belonging to an as-yet-uncounted number of guests across Australia. It is a familiar story in the digital age: trust extended to partners, and trust broken at the seam