🏛️Massachusetts State AGlinked via multistate filing link · 95%
Clustered 3 filings across 3 jurisdictions · filing window Jul 1, 2026 → Jul 22, 2026. View entity profile → Other incidents for this victim →
incident inc_c00f84dba7624569 · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Government ID · PHI · PII
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
MA TX VT
all State AG
Earliest sighting first · deep chronology in Litigation Timeline
Oct 1, 2025 → Oct 9, 2025
When the intrusion reportedly occurred, per the linked filings
Jun 22, 2026
Reported by MASSACHUSETTS AG, TEXAS AG filings
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Questo, Inc. disclosed a security incident occurring between October 1 and October 9, 2025, where an unauthorized actor accessed files containing personal information. The breach was detected and reported on June 22, 2026. Questo engaged outside cybersecurity professionals, secured its network, and is offering 24 months of identity monitoring via Kroll to affected individuals. No evidence of identity theft was found.
Questo, Inc. based in Augusta, Georgia, a business – retail or merchant entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-06-22 and reported on 2026-07-17. 354 Texas residents were affected. 11,950 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Driver’s License number;Government-issued ID number (e.g. passport, state ID card);Financial Information (e.g. account number, credit or debit card number);Medical Information. Consumers were notified via Notice by publication in print media;Posted at company website or special website;U.S. Mail;Email.
Affected (this filing): 354
Questo, Inc. reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-07-22. The reporting organization type is Other Commercial. 27 Vermont residents were affected. Categories of data breached: Social Security Numbers, Financial Account Codes, Credit and Debit Account Info.