Questo Data Breach Compromised Financial Account Information and SSNs

Questo Inc., the parent company of Morris Communications Co. LLC, has disclosed a data breach that has so far impacted 354 Texas residents and 15 Massachusetts residents.

Questo discovered the breach when unusual activity was detected in its network environment. The company brought in outside cybersecurity professionals to evaluate what had happened and determine the extent of the impact on its network.

The investigation found that an unauthorized actor accessed certain files stored on the company's network over a nine-day period, from Oct. 1 through Oct. 9, 2025.

On June 22, 2026, the company completed its review of the impacted files, confirming that personal information may have been accessed without authorization.

The types of information exposed included full names and dates of birth, driver's license or other government identification card numbers, passport numbers, tax information, Social Security numbers, financial account information, payment card information and medical information.

The breach was disclosed to the California Attorney General on July 16, 2026. The company has posted a notice about the incident on its website.

Questo's response to the breach

Questo is providing complimentary identity monitoring services through Kroll for up to 24 months. The services include single bureau credit monitoring, unlimited fraud consultation with Kroll specialists and identity theft restoration services.

Affected individuals can enroll by visiting Kroll's enrollment website and entering the unique membership number included in their notification letter. Enrollment must be completed within 90 days of the date on the letter.

The company has also set up a dedicated, confidential toll-free response line at 844-958-8901 for people with questions about the incident. The line is available Monday through Friday from 9 a.m. to 6:30 p.m. Eastern Time, excluding major U.S. holidays.