The QuestionPro Inc data breach: your legal rights
QuestionPro Inc recently reported a data breach impacting personal information, including names, emails, and demographic data. This incident could leave affected individuals vulnerable to scams and identity theft, making it important to understand your legal protections and next steps. Indiana residents who received a notice should know their rights under state and federal law.
Get a free case reviewYour rights after this breach
To be told about the breach
Indiana law requires a company that loses residents' personal information to notify them. QuestionPro Inc reported this breach to the Indiana Attorney General.
Indiana data breach notification law
To ask whether you can recover money
If QuestionPro Inc did not take reasonable care of your information, you may have a claim for negligence or under Indiana law. An attorney can review it with you for free.
Indiana common law and consumer protection statutes
Free case review
Tell us you got the QuestionPro Inc notice. An attorney reviews it and tells you plainly whether you may have a claim.
- Free, no obligation
- No fee unless you recover
- Reply within 24 hours
What QuestionPro Inc reported
- Reported to
- Indiana Attorney General
- Date filed
- August 15, 2026
- People notified
- Not stated
- Cause in filing
- Not stated
Information listed in the filing: Full Name, Email Address, Password or Credential Hash, Mailing Address, Telephone Number, Date of Birth, Purchase and Order History, Demographic and Survey Response Data.
QuestionPro Inc, an enterprise software and market research technology company, has reported a data breach to the Indiana Attorney General. The incident, which occurred on August 12, 2026, involves the exposure of various personal details. The company filed its official notice on August 15, 2026, and states that its investigation is currently monitoring the situation.
Sensitive personal information was compromised in this breach. The exposed data includes Full Name, Email Address, Password or Credential Hash, Mailing Address, Telephone Number, Date of Birth, Purchase and Order History, and Demographic and Survey Response Data. This combination of identifiers and personal details creates a heightened risk for targeted phishing attacks, credential stuffing, and other forms of identity theft.
As a company handling extensive consumer and corporate data, QuestionPro Inc is legally obligated to maintain reasonable security measures. This duty arises from state data protection statutes and Section 5 of the Federal Trade Commission Act, which requires companies to protect consumer data. A data breach suggests potential security vulnerabilities or failures in safeguarding the information entrusted to them.
If you received a data breach notification letter from QuestionPro Inc, it signifies that your personal information was part of this compromise. Under existing legal frameworks, the mere fact of receiving such a notice and the resulting increased risk of identity theft can establish grounds for legal action, even if you haven't yet experienced direct financial losses. This may allow affected individuals to participate in class action lawsuits.
To protect yourself, immediately review the notification letter from QuestionPro Inc for specific recommendations. Consider placing a fraud alert or credit freeze on your credit reports with the major credit bureaus. Also, change any passwords for accounts that use the same credentials as those associated with QuestionPro Inc. Monitor your financial statements and online accounts regularly for any suspicious activity.
Understanding your legal rights after a data breach can be complex. You have rights under state laws, such as the Indiana data breach notification law, and federal protections. Consulting with an attorney can help you understand these rights and explore any potential legal claims against QuestionPro Inc. Our firm is currently investigating this breach and offers free case reviews, operating on a contingency fee basis.
See the official filingQuestionPro Inc data breach questions
- How many people were affected by the QuestionPro Inc data breach, and what was exposed?
- The filing does not give a count of affected people and lists the following information as involved: Full Name, Email Address, Password or Credential Hash, Mailing Address, Telephone Number, Date of Birth, Purchase and Order History, Demographic and Survey Response Data. Your own letter is the best guide to what was exposed about you, since notices are usually tailored to each person.
- Is the QuestionPro Inc data breach letter legit or a scam?
- A notice from QuestionPro Inc in the mail matches the breach QuestionPro Inc reported to the Indiana Attorney General on August 15, 2026. Check that the company name and dates in your letter match that filing. A real notice of data security incident won't ask for your password, Social Security number or a payment — if it does, contact QuestionPro Inc through a phone number or website you find yourself.
- Did QuestionPro Inc offer free credit monitoring?
- Check your letter from QuestionPro Inc. If free credit or identity monitoring is offered, the enrollment code and deadline are printed in the notice itself. Enrolling does not give up your right to bring a claim.
- Is there a QuestionPro Inc data breach class action lawsuit?
- Law firms often open an investigation after a breach notice like this one, and a class action lawsuit may follow. This page doesn't confirm that a lawsuit has been filed against QuestionPro Inc. You usually don't have to join a class action to be included — if a settlement is reached, class members are notified and can file a claim.
- What should I do after getting the QuestionPro Inc data breach notice?
- Keep the letter and the envelope, and note the date it arrived. Freeze your credit with Equifax, Experian and TransUnion, change any passwords the notice mentions, and sign up for any free credit monitoring the letter offers. Then check whether you may have a claim.
- Where can I see the official QuestionPro Inc breach notice?
- QuestionPro Inc's report is published by the Indiana Attorney General: https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/security-breaches/#926questionpro-inc-2026 Compare it with the letter you received to confirm the dates and details match.
- Do I need a QuestionPro Inc data breach lawyer or attorney?
- An attorney can read your notice and tell you whether a claim makes sense. A case review here is free, and data breach cases are usually handled on contingency, so there is no upfront cost.
- Can I sue QuestionPro Inc over the data breach?
- It depends on what was exposed, the law in Indiana and your own state, and whether you've been harmed. Most people take part through a class action rather than suing alone. Keep your notification letter — it's the proof that connects you to the breach.
- How much could a QuestionPro Inc data breach settlement or claim be worth?
- There is no set amount, and no QuestionPro Inc settlement is confirmed here. In past data breach settlements, payments depended on what data was exposed and on documented losses — fraud, out-of-pocket costs and time spent dealing with the breach. The filing lists Full Name, Email Address, Password or Credential Hash as involved. Keep receipts and records; they're what damages claims are built on.
Other breaches reported in Indiana
- Bozeman School DistrictIndiana Attorney General · Filed date pendingCount not stated
- Bozeman School DistrictIN Attorney General · Filed date pendingCount not stated
- Teamsters Local 17Indiana Attorney General · Filed date pendingCount not stated
- Teamsters Local 17IN Attorney General · Filed date pendingCount not stated
- BankIndiana Attorney General · Filed date pendingCount not stated
- BankIN Attorney General · Filed date pendingCount not stated
Attorney advertising. General information, not legal advice for your situation. This page reflects a public regulator filing; it does not mean a lawsuit has been filed or that the company did anything unlawful. Submitting a review request does not create an attorney-client relationship.