Questo, Inc.

Questo, Inc. reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-07-22. The reporting organization type is Other Commercial. 27 Vermont residents were affected. Categories of data breached: Social Security Numbers, Financial Account Codes, Credit and Debit Account Info.

Questo, Inc. based in Augusta, Georgia, a business – retail or merchant entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-06-22 and reported on 2026-07-17. 354 Texas residents were affected. 11,950 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Driver’s License number;Government-issued ID number (e.g. passport, state ID card);Financial Information (e.g. account number, credit or debit card number);Medical Information. Consumers were notified via Notice by publication in print media;Posted at company website or special website;U.S. Mail;Email.

Questo, Inc. detected unusual network activity on October 9, 2025. An investigation revealed unauthorized access to certain files between October 1 and October 9, 2025. The company secured its network and engaged outside cybersecurity professionals. Identity monitoring services were provided via Kroll. The incident affected residents in multiple states, including California and Rhode Island.

Questo, Inc. disclosed a security incident occurring between October 1 and October 9, 2025, where an unauthorized actor accessed files containing personal information. The breach was detected and reported on June 22, 2026. Questo engaged outside cybersecurity professionals, secured its network, and is offering 24 months of identity monitoring via Kroll to affected individuals. No evidence of identity theft was found.