Supply chain data breach affecting Australian consumers via a third-party partner accommodation portal compromise. Threat actors bypassed access parameters to harvest customer names, emails, physical addresses, and active booking schedules to execute highly targeted phishing campaigns.