QuestionPro Inc Reports Data Exposure to Indiana Regulators in 2026
QuestionPro Inc, an enterprise software and market research technology firm, reported a data exposure incident to Indiana authorities on August 15, 2026. This breach, which occurred on August 12, 2026, involved multiple categories of personal information and is currently under monitoring.
- State
- Indiana
- Breach date
- August 12, 2026
- Reported
- August 15, 2026
What may have been exposed
- Full Name
- Email Address
- Password or Credential Hash
- Mailing Address
- Telephone Number
- Date of Birth
- Purchase and Order History
- Demographic and Survey Response Data
QuestionPro Inc, a company specializing in enterprise software and market research technology, filed a notice of a data security incident with Indiana state regulators on August 15, 2026. The company reported that the breach took place on August 12, 2026. The specific type of security incident that led to this exposure was not detailed in the public filing.
As a significant data processor for various organizations, QuestionPro Inc manages extensive information. While the exact cause remains part of an ongoing investigation, breaches affecting technology platforms often result from unauthorized access to systems where sensitive data is stored or processed.
The official filing confirms that the incident potentially exposed several types of personal data. These categories include Full Name, Email Address, Password or Credential Hash, Mailing Address, Telephone Number, Date of Birth, Purchase and Order History, and Demographic and Survey Response Data. Individuals receiving official notification letters should carefully review the specific details provided to understand what information of theirs may have been affected.
Individuals who have received a data breach notification from QuestionPro Inc should remain vigilant for potential misuse of their personal information. It is advisable to monitor financial accounts and credit reports for any unusual activity. Be cautious of unsolicited emails, texts, or phone calls, as these could be phishing attempts using compromised data. Consider changing passwords for online accounts, especially if similar credentials were used across multiple services.
Regularly reviewing account statements and exercising general cybersecurity best practices, such as using strong, unique passwords and enabling multi-factor authentication where available, can help protect against potential risks stemming from such incidents. The company's investigation into the scope and impact of the breach is currently ongoing, as noted in public records.
What to do if you were affected
Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.
Secure your online accounts
Change the password on any account that reused an exposed password and turn on two-factor authentication wherever it's offered.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Source: Indiana Attorney General filing
Related data breach cases
- Bozeman School District
- Bozeman School DistrictIN
- Teamsters Local 17
- Teamsters Local 17IN
- Bank
- BankIN
- PeoplesBank
- World Acceptance Corporation
- McKenzie Creative Brands
- MEBS Global Reach
- Midvale Indemnity and American Family Connect Insurance Company
- American Motorcyclist Association
- Nishiyamato Academy
- Deer Management Co. LLC dba Bessemer Venture Partners