Quest breach update identifies payment and identity-document exposure

A forensic update on the Quest Apartment Hotels breach found nearly two million affected customers, expanding the incident beyond the contact information emphasized in August. Parent company The Ascott Limited said 344,466 credit card numbers were compromised, including 46,727 with CVVs, while 104,268 customers had passport or driver-licence numbers exposed and 225,300 had vehicle registration numbers affected. The intrusion originated through a vulnerability at an unnamed third-party provider rather than Quest's systems. No attacker, extortion demand or related dark-web listing had been identified when the report was published.