Quest
On Monday, 17 August 2026, we identified unauthorised access to a database system arising from a vulnerability through a third-party service provider. We immediately took steps to contain the incident and secure the affected systems.
The incident has been contained, and remediation work has been completed.
What we know
We have undertaken forensic analysis to establish what information was accessed and the extent of the incident. Our investigation so far has confirmed that the information involved relates to records from before June 2025 and primarily involves names, email addresses, and/or other
/Public Release.
