Meriton Breach Affects 2000 Guests and Staff

Guests and employees at Meriton's serviced apartment properties across Australia's east coast have been advised of a cyber attack in January that potentially exposed incident reports related to their stays or employment.

Nearly 2000 people — including guests who have booked accommodation at Meriton Suites in Sydney, Brisbane, the Gold Coast, Melbourne and Canberra, as well as past and present staff — have been notified of the breach. The hackers accessed records relating to incidents at the properties, such as injury reports, though the company emphasised that no payment or credit card information was compromised.

Of the 35.6 gigabytes of data involved, Meriton said very little was sensitive in nature. More importantly for those affected, the company has indicated there is no evidence of information being misused or released into the public realm.

The incident raises privacy concerns for the thousands of Australians who rely on serviced apartments for accommodation while travelling for work or leisure. Meriton's network of properties makes it a frequent choice across the country's major cities, meaning the breach potentially touches guests from numerous local communities.

Meriton has reported the matter to the Australian Cyber Security Centre and the Office of the Australian Information Commissioner. The company says it has already implemented enhanced cybersecurity measures and strengthened network monitoring to detect and prevent future attacks.

For affected guests and staff, Meriton's swift disclosure and the confirmation that sensitive financial data was not compromised offer some reassurance. However, the breach is the latest in a concerning series of high-profile cyber attacks affecting major Australian organisations.

In recent weeks, consumer finance firm Latitude Group revealed that 14 million customers across Australia and New Zealand had personal information stolen, including nearly 8 million driver's licences and passport numbers. Earlier attacks on Medibank and Optus exposed millions of Australians to potential identity theft and fraud.

Consumer advocates have urged Australian businesses to strengthen data security protocols, particularly as the frequency and scale of breaches continue to escalate. For those who have stayed at or worked for Meriton, experts recommend monitoring financial accounts for suspicious activity and exercising caution with unexpected communications.

The company's transparent communication with affected individuals and investment in security upgrades represent a proactive response. Yet the mounting toll of data breaches across Australia's business landscape suggests that cybersecurity remains a significant challenge for organisations of all sizes.