Questo, Inc.
bd_a5c6ff979e16a9d8 · schema v1 · pii pii-v1
Full breach record for Questo, Inc. →Questo, Inc. detected unusual network activity on October 9, 2025. An investigation revealed unauthorized access to certain files between October 1 and October 9, 2025. The company secured its network and engaged outside cybersecurity professionals. Identity monitoring services were provided via Kroll. The incident affected residents in multiple states, including California and Rhode Island.
J jump to incidentP pin to compareR raw source
Incident timeline
Oct 1, 2025
Begins
Oct 9, 2025
Discovered
Jul 16, 2026
Filed
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Massachusetts State AGbd_1b7a85c31a3fd63b2026-07-17 · +1dVerified
- Texas State AGbd_6a303fe2629f33262026-07-17 · +1dVerified
- Nebraska State AGbd_0a81a18aa78e777d2026-07-15 · +1dVerified
- Vermont State AGbd_748d4d39d0e167ff2026-07-22 · +6dVerified
Show 1 more filing ↓Show fewer ↑up to 7d gap
- New Hampshire State AGbd_b7acf1d77c834d252026-07-23 · +7dVerified
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Jul 15 (NE), last Jul 23 (NH) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.