Questo Inc. Discloses Data Breach Affecting Hundreds of Residents
Questo Inc., the parent company of Morris Communications Co. LLC, recently revealed a data breach impacting 354 Texas residents and 15 Massachusetts residents. The incident was detected after unusual network activity prompted an investigation, which confirmed unauthorized access to sensitive files between October 1 and October 9, 2025.
The breach exposed a range of personal data, including full names, dates of birth, government IDs, Social Security numbers, financial account details, payment card information, and medical records. After completing its review on June 22, 2026, Questo disclosed the incident to the California Attorney General on July 16, 2026, and posted a public notice on its website.
In response, Questo is offering 24 months of complimentary identity monitoring through Kroll, including credit monitoring, fraud consultation, and identity theft restoration. Affected individuals must enroll within 90 days of receiving their notification letter. The company has also established a dedicated helpline (844-958-8901) for inquiries, available weekdays from 9 a.m. to 6:30 p.m. ET.
Source: https://www.claimdepot.com/data-breach/questo-2026
Morris Communications cybersecurity rating report: https://www.rankiteo.com/company/morriscommunications
Questo Media cybersecurity rating report: https://www.rankiteo.com/company/questo-media
"id": "MORQUE1784645163",
"linkid": "morriscommunications, questo-media",
"type": "Breach",
"date": "10/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '369',
'industry': 'Communications',
'location': 'United States',
'name': 'Questo Inc. (Morris Communications Co. LLC)',
'type': 'Corporation'}],
'customer_advisories': '24 months of complimentary identity monitoring '
'through Kroll, enrollment required within 90 days of '
'notification',
'data_breach': {'number_of_records_exposed': '369',
'personally_identifiable_information': 'Full names, dates of '
'birth, government '
'IDs, Social Security '
'numbers',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Identifiable '
'Information',
'Financial Information',
'Medical Records']},
'date_detected': '2025-10-01',
'date_publicly_disclosed': '2026-07-16',
'description': 'Questo Inc., the parent company of Morris Communications Co. '
'LLC, disclosed a data breach impacting 354 Texas residents '
'and 15 Massachusetts residents. The incident was detected '
'after unusual network activity prompted an investigation, '
'which confirmed unauthorized access to sensitive files '
'between October 1 and October 9, 2025. The breach exposed '
'personal data including full names, dates of birth, '
'government IDs, Social Security numbers, financial account '
'details, payment card information, and medical records.',
'impact': {'data_compromised': 'Personal data including full names, dates of '
'birth, government IDs, Social Security '
'numbers, financial account details, payment '
'card information, and medical records',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'investigation_status': 'Completed (review finished on 2026-06-22)',
'references': [{'source': 'Questo Inc. Public Notice'}],
'regulatory_compliance': {'regulatory_notifications': ['California Attorney '
'General']},
'response': {'communication_strategy': 'Public notice on website, '
'notification letters to affected '
'individuals, dedicated helpline '
'(844-958-8901)',
'third_party_assistance': 'Kroll (identity monitoring services)'},
'title': 'Questo Inc. Data Breach Affecting Hundreds of Residents',
'type': 'Data Breach'}