The $4.5 Billion Airport Dispute: When a Data Room Puts the Whole Investment at Risk

01 The proposed transaction was only part of the exposure

APAC owns Melbourne and Launceston airports. Its shareholders' deed governs the relationship between institutional investors, their associated entities and the company, including transfers, confidentiality and default.

The plaintiffs held or managed interests totalling 27.32% of APAC, commonly described as the Dexus Bloc. The judgment distinguishes Dexus Capital Investment Services Pty Ltd and Dexus Capital Investors Limited, as well as the underlying shareholder entities. “Dexus” is convenient shorthand, but it should not obscure the fact that different entities held different rights and obligations.

Preparations for Project Mercury began in late 2023, with the sale process developed during 2024. The proposed sale involved approximately 9.7% of APAC, rather than 9.7% of the bloc's own holding.

The deed included pre-emptive rights and provisions concerning affiliate transfers. Dexus pursued a structure relying on the affiliate provisions. But whether a transfer structure was available was not the only question. There were separate restrictions on releasing APAC's confidential information to prospective purchasers.

That distinction is central. Permission to pursue a commercial outcome is not necessarily permission to take every step that might help achieve it. A transfer clause does not displace a confidentiality clause simply because buyers need information to price the asset.

For another business, the equivalent problem might arise in a joint venture, a minority investment, a business sale or a financing. The proposed transaction can be legitimate while the disclosure process used to support it breaches a separate obligation.

02 Why a confidentiality agreement was not enough

During the sale process, prospective purchasers and their advisers received access to a virtual data room containing confidential APAC information. The Court found that disclosure extended to at least 137 individuals across 40 organisations.

The information included a long-term financial model and sensitive financial and operational material. Its importance went beyond investment valuation: information concerning revenues, costs and commercial arrangements could matter to APAC's dealings with other market participants, including airlines.

These findings do not mean every recipient misused the information, or that the information became public. The issue was disclosure without compliance with the contractual protections required by the deed.

Clause 15.4(g) required a prospective purchaser to enter into a confidentiality deed with the other shareholders, in a form to their reasonable satisfaction and enforceable by them. A confidentiality document that looked acceptable to the disclosing party did not necessarily meet those requirements.

The reasons examine the deed-poll arrangements, the absence of the required approval and side letters altering aspects of the protections. The lesson is not that NDAs are generally ineffective. It is that an NDA needs to satisfy the particular agreement under which disclosure is permitted.

Ask whose rights the document protects

Before opening a data room, establish who owns or controls the information, who must approve disclosure, who needs enforceable rights against recipients and which advisers or related entities may receive access. Check the executed documents, not just the template.

A side letter can matter as much as the main undertaking. If it qualifies use restrictions, liability, deletion requirements or enforceability, assess the combined arrangement. A document previously used in another process is not evidence that the approvals required for this process have been obtained.

The relevant question is not simply, “Did the buyer sign an NDA?” It is, “Did we obtain the confidentiality protection this contract requires?”

03 Not every confidentiality breach is irremediable

The Court found a “material Irremediable Breach” under this shareholders' deed. Both parts of that conclusion matter.

Materiality concerns the quality and seriousness of the breach, not simply whether the obligation breached was important. Irremediability requires consideration of whether the effects of the breach can be put right for the future, rather than only whether the historical event can be reversed.

It would therefore be wrong to extract a universal rule that every unauthorised disclosure is automatically irremediable. The judgment recognises that the circumstances of each case matter. Retrieval of information and effective undertakings against use may, in a confined situation, be capable of putting matters right.

That was not a realistic answer on these facts. The Court considered the breadth and sensitivity of the dissemination, the deficiencies in protection and the consequences for trust in an ongoing commercial relationship. The subsequent conduct was also important to its assessment.

Deleting a file does not necessarily eliminate the knowledge obtained from it. Equally, that observation does not mean containment is pointless. Closing access, preserving logs, obtaining appropriate undertakings and investigating further dissemination may still reduce risk. Whether those steps cure a breach under the relevant agreement is a separate legal question.

The practical conclusion is more precise than “confidentiality breaches cannot be fixed”: do not assume that measures available after disclosure will restore the position the contract required before disclosure.

04 Read the default clause before the transaction starts

APAC issued the Default Notice on 15 May 2025. On 29 May 2026, Hammerschlag CJ in Eq held that it was valid and effective. The Court also rejected the challenge based on alleged improper motivations in the decision to issue it.

The default consequences were not confined to the shares proposed for sale. On the Court's construction of the deed, they extended to the wider bloc, including non-selling affiliates.

Dexus's contemporaneous disclosure explained that a valid notice required a compulsory process to offer the bloc's shares to the remaining shareholders at assessed fair market value, together with suspension of governance, voting and information rights. The judgment did not award APAC $4.5 billion in damages.

That distinction does not make the consequences commercially minor. An investor may lose the ability to choose whether and when to exit, while changes to voting, information and board rights affect its position during the process. Valuation and timing can themselves become significant issues.

Do not assume every default clause works the same way

Another agreement may provide a cure period, require a particular notice, distinguish different classes of default or impose consequences only on the defaulting entity. The construction of defined terms, affiliate provisions and the relationship between clauses can change the answer.

Nor does this judgment establish that every compulsory-transfer provision is enforceable in every circumstance. Questions concerning penalties or equitable relief against forfeiture may arise under other agreements and facts. A fair-market-value process is not the same as automatic confiscation or a transfer at a punitive discount.

Before proceeding, identify the full consequence of a breach: damages, indemnity, termination, suspended rights, compulsory transfer or a combination. Then check whether that consequence reaches related entities or interests that are not part of the proposed transaction.

05 The response to a concern can become part of the case

A confidentiality dispute rarely turns only on the wording of the undertaking. It also turns on who received the information, what they could access, what approvals existed and what the parties said when questions arose.

The Court considered subsequent communications and conduct, including misleading or incomplete information provided to APAC. Those findings formed part of the assessment of the breach and the breakdown of trust. They should be understood as findings about this litigation, not as allegations about every person involved in the sale process.

When concerns arise, do not answer from memory or assume the data-room permissions operated as intended. Preserve access logs, downloads, approval records, executed undertakings, side letters, emails and internal instructions. Establish the relevant chronology before offering a definitive account.

Obtain legal advice on containment, notification duties and the response. Preserve potentially relevant evidence even when restricting access or arranging the return of confidential material. A containment exercise should not destroy the records needed to establish what happened.

Careful responses matter for both sides. A party asserting default must also establish that its notice, decision-making process and proposed remedy comply with the contract. Commercial frustration is not a substitute for a valid contractual trigger.

06 The costs exposure is separate from the asset value

On 27 October 2026, Dexus disclosed that orders made the previous day required Dexus Capital Investors Limited (DCIL) to pay approximately $30 million to APAC and specified non-Dexus Bloc shareholders under the indemnity in the shareholders' deed.

This is more specific than a report that “Dexus faces almost $30 million in legal costs”. The announcement identifies a particular entity, a contractual indemnity and orders already made.

Dexus also reported ordinary-basis costs orders against other plaintiff bloc shareholders, excluding amounts covered by the indemnity orders so there would be no double recovery. Additional indemnity-basis costs for the costs hearing were provisionally ordered, to take effect after seven days unless challenged in writing.

A separate TCorp indemnity claim for $7.4 million had been resolved before judgment, with final terms still being finalised. That claimed amount should not be presented as a further court award or assumed to be the settlement amount. Dexus's reference to approximately $60 million expensed in FY26 is an accounting disclosure, not a $60 million damages or costs award.

These October details are taken from Dexus's official disclosure. This article does not analyse the full October costs reasons or sealed orders.

The substantive appeals remain pending

The interim injunctions were dissolved on 12 June 2026, permitting the contractual sale process to continue. Appeals were subsequently filed by REST and the remaining Dexus Bloc shareholders. Dexus's 27 October announcement confirms that the appeals remain listed for 30 November to 2 December 2026, with an additional day available if required.

An appeal does not itself stay enforcement. This account has not verified a later order restoring protection or a completed compulsory transfer. It should not be read as saying either that the investment has already been sold or that the sale process is automatically frozen until the appeals are decided.

For a business considering litigation, the broader point is to assess contractual indemnities alongside ordinary litigation costs. The agreement may create exposure beyond the usual costs discretion. A claim's commercial significance cannot be measured solely by the damages being sought.

07 Before you open the data room

The same questions matter well beyond airport infrastructure. Before releasing another party's commercially sensitive information during a sale, refinancing or shareholder transaction:

• Read the agreements together. Review transfer restrictions, pre-emptive rights, confidentiality provisions, approvals, defined terms and default mechanisms. Do not assess the transaction through one clause in isolation.
• Identify the protected parties. Establish who must consent and who needs enforceable rights against each recipient. Separate the manager's interests from those of the underlying shareholders and the company.
• Verify the executed protection. Check the actual confidentiality documents and any side letters. Record required approvals before access is granted.
• Control the information and audience. Consider staged disclosure, redaction, restricted groups and clean-team arrangements where appropriate. These measures supplement, rather than replace, compliance with the governing contract.
• Map the whole default exposure. Ask which rights, assets and related entities could be affected, whether the breach can be cured and what the notice must contain.
• Keep an auditable record. Retain access logs, recipient lists, approvals and disclosure decisions. Check that access controls operate in practice.
• Prepare the response. Have a process for suspending access, preserving evidence, investigating a concern and obtaining advice before making substantive admissions or asserting default.

These steps do not guarantee that a dispute will be avoided. They make it easier to understand the risk before an irreversible disclosure, and to establish the facts if the relationship deteriorates.

08 Protect the position before the options narrow

The Dexus/APAC dispute is not simply a warning about keeping documents secret. It is a warning about assuming that a familiar commercial process satisfies an unfamiliar contractual framework.

A proposed purchaser can have signed a confidentiality document, a seller can have a legitimate commercial objective, and the transaction can still expose a much larger interest to default consequences. The contract, the disclosures and the evidence determine the position.

If you are facing a disputed default notice, a threatened compulsory transfer, a confidentiality breach or a breakdown in shareholder relations, the immediate task is to understand which rights are at risk and what can still be protected. Where urgent relief may be needed, timing matters.

GopherWood Lawyers acts for companies, directors and shareholders in commercial contract and shareholder disputes, including disputes over confidential information, governance rights and urgent relief. Contact us about your dispute.

09 Sources and case status

Reviewed as at 27 October 2026. The substantive judgment and official Dexus disclosures are distinguished below from practitioner commentary. Pending appeals may change the position. This article provides general information, not legal advice about a particular transaction or dispute.

1. Dexus Capital Investment Services Pty Ltd v Australia Pacific Airports Corporation Limited [2026] NSWSC 600, 29 May 2026: substantive reasons on the deed, disclosures, materiality, irremediability and validity of the notice.
2. Dexus, ASX release, 29 May 2026: default consequences, assessed fair market value and then-continuing interim protection.
3. Dexus Core Infrastructure Fund, APAC update, June 2026: dissolution of injunctions on 12 June and continuation of the sale process.
4. Dexus, appeal update, June 2026: appeals by REST and the remaining bloc shareholders.
5. Dexus, ASX release, 27 October 2026: disclosure of 26 October costs and indemnity orders and the current appeal listing. The full October costs reasons and sealed orders have not been independently analysed for this article.
6. Gilbert + Tobin, Melbourne Airport shareholder dispute: practical takeaways: practitioner commentary, including the proposed 9.7% interest; the firm acted for IFM.
7. Corrs, lessons from Dexus v Australia Pacific Airports: practitioner commentary and the reported approximately $4.5 billion investment valuation.