DataBreachInformation.com
MonitoringIndiana AG filing · August 15, 2026

QuestionPro Inc Reports Data Exposure to Indiana Regulators in 2026

QuestionPro Inc, an enterprise software and market research technology firm, reported a data exposure incident to Indiana authorities on August 15, 2026. This breach, which occurred on August 12, 2026, involved multiple categories of personal information and is currently under monitoring.

State
Indiana
Breach date
August 12, 2026
Reported
August 15, 2026

What may have been exposed

  • Full Name
  • Email Address
  • Password or Credential Hash
  • Mailing Address
  • Telephone Number
  • Date of Birth
  • Purchase and Order History
  • Demographic and Survey Response Data

QuestionPro Inc, a company specializing in enterprise software and market research technology, filed a notice of a data security incident with Indiana state regulators on August 15, 2026. The company reported that the breach took place on August 12, 2026. The specific type of security incident that led to this exposure was not detailed in the public filing.

As a significant data processor for various organizations, QuestionPro Inc manages extensive information. While the exact cause remains part of an ongoing investigation, breaches affecting technology platforms often result from unauthorized access to systems where sensitive data is stored or processed.

The official filing confirms that the incident potentially exposed several types of personal data. These categories include Full Name, Email Address, Password or Credential Hash, Mailing Address, Telephone Number, Date of Birth, Purchase and Order History, and Demographic and Survey Response Data. Individuals receiving official notification letters should carefully review the specific details provided to understand what information of theirs may have been affected.

Individuals who have received a data breach notification from QuestionPro Inc should remain vigilant for potential misuse of their personal information. It is advisable to monitor financial accounts and credit reports for any unusual activity. Be cautious of unsolicited emails, texts, or phone calls, as these could be phishing attempts using compromised data. Consider changing passwords for online accounts, especially if similar credentials were used across multiple services.

Regularly reviewing account statements and exercising general cybersecurity best practices, such as using strong, unique passwords and enabling multi-factor authentication where available, can help protect against potential risks stemming from such incidents. The company's investigation into the scope and impact of the breach is currently ongoing, as noted in public records.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

  • Secure your online accounts

    Change the password on any account that reused an exposed password and turn on two-factor authentication wherever it's offered.

  • Stay alert to targeted scams

    Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.

  • Keep your notification letter

    Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Indiana Attorney General filing

Related data breach cases