Questo, Inc. Data Breach Exposes Sensitive Personal Information
On October 9, 2025, travel app company Questo, Inc. detected suspicious activity on its network, prompting an investigation. By June 22, 2026, the company confirmed that an unauthorized third party had accessed or acquired sensitive files between October 1 and October 9, 2025. The exposed data may include full names, dates of birth, government-issued ID numbers, passport details, Social Security numbers, financial account information, payment card data, and medical records.
Questo, Inc., known for its interactive city adventure app, disclosed the breach in late 2025. Affected individuals particularly those who received a breach notification face heightened risks of identity theft and fraud. National class action law firm Edelson Lechtzin LLP has since launched an investigation into potential legal claims on behalf of impacted users, offering free case evaluations to assess rights and remedies.
The firm, with offices in Pennsylvania and California, specializes in data privacy litigation and is actively reviewing claims related to the incident. No further details on the breach’s scope or the number of affected individuals have been disclosed as of July 24, 2026.
Questo cybersecurity rating report: https://www.rankiteo.com/company/questoapp
"id": "QUE1784917481",
"linkid": "questoapp",
"type": "Breach",
"date": "10/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Travel/Technology',
'name': 'Questo, Inc.',
'type': 'Company'}],
'customer_advisories': 'Affected individuals notified of the breach',
'data_breach': {'personally_identifiable_information': 'Full names, dates of '
'birth, '
'government-issued ID '
'numbers, passport '
'details, Social '
'Security numbers',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Identifiable '
'Information',
'Financial Information',
'Medical Records']},
'date_detected': '2025-10-09',
'date_publicly_disclosed': '2025-12-01',
'description': 'On October 9, 2025, travel app company Questo, Inc. detected '
'suspicious activity on its network, prompting an '
'investigation. By June 22, 2026, the company confirmed that '
'an unauthorized third party had accessed or acquired '
'sensitive files between October 1 and October 9, 2025. The '
'exposed data may include full names, dates of birth, '
'government-issued ID numbers, passport details, Social '
'Security numbers, financial account information, payment card '
'data, and medical records.',
'impact': {'data_compromised': 'Sensitive personal information including full '
'names, dates of birth, government-issued ID '
'numbers, passport details, Social Security '
'numbers, financial account information, '
'payment card data, and medical records',
'identity_theft_risk': 'Heightened risks of identity theft and '
'fraud',
'legal_liabilities': 'Potential legal claims under investigation',
'payment_information_risk': 'Payment card data exposed'},
'investigation_status': 'Ongoing',
'references': [{'date_accessed': '2026-07-24',
'source': 'Edelson Lechtzin LLP'}],
'regulatory_compliance': {'legal_actions': 'Class action investigation '
'launched by Edelson Lechtzin LLP'},
'response': {'communication_strategy': 'Breach notification sent to affected '
'individuals'},
'title': 'Questo, Inc. Data Breach Exposes Sensitive Personal Information',
'type': 'Data Breach'}