Almeida Law Group is investigating a data breach at Quatrro Business Support Services, Inc. (“Quatrro”). The breach occurred on November 11th–19th, 2025 and was discovered on August 20th, 2026. If you were affected, contact Almeida Law Group.
About Quatrro Business Support Services, Inc. (“Quatrro”)
Quatrro Business Support Services, Inc. (also known as QBSS) is a technology-enabled business process outsourcing firm headquartered in Marietta, Georgia, with additional operations in India. The company provides cloud-based finance and accounting, human resources, enterprise applications, and managed IT and cybersecurity services to more than 2,000 small and midsized business clients across sectors including restaurant, healthcare, private equity, technology, hospitality, and not-for-profit industries. As of March 10th, 2026, QBSS unified its portfolio of brands under the single name ContinuServe. Because Quatrro processes financial, HR, and business records on behalf of its clients, the breach potentially exposed sensitive personal information belonging to those clients’ employees and other individuals.
What Happened?
Quatrro Business Support Services, Inc. (“Quatrro”) was listed in a Texas Attorney General data security breach report. According to that filing and Quatrro’s own notification letter, unauthorized access to the company’s systems occurred between November 11th, 2025 and November 19th, 2025. Quatrro identified and began addressing the incident on December 7th, 2025. A review of the accessed files was completed on February 25th, 2026, confirming that personal information had been exposed. Notification letters were mailed to affected individuals beginning March 23rd, 2026. The Texas Attorney General filing, dated September 11th, 2026, reported a total of 188,218 individuals affected nationwide. The types of information involved include names, Social Security numbers, driver’s license numbers, passport numbers, financial account numbers, payment card numbers, and health insurance policy numbers.
No specific threat actor or ransomware group has been publicly identified in connection with this incident. The Texas filing represents a significantly expanded scope compared to earlier state filings, which listed only a handful of affected individuals in Maine and New Hampshire. Quatrro is offering complimentary credit monitoring and identity protection services through Kroll. Multiple law firms have announced investigations into potential class action lawsuits, though no class action complaint has been filed as of the date of this post.
Key Facts at a Glance
- Company or Organization: Quatrro Business Support Services, Inc. (“Quatrro”) (now ContinuServe)
- Industry: Technology-enabled business process outsourcing (BPO) — finance, accounting, HR, and managed IT services
- Location: Marietta, Georgia
- Incident type: Unauthorized access to systems
- Date of breach: November 11th, 2025 – November 19th, 2025
- Date breach discovered: August 20th, 2026
- Date of consumer notification: March 23rd, 2026
- Total persons affected: 188,218
- Identity theft protection offered: Yes — complimentary credit monitoring and identity protection through Kroll
- Prior breach: None identified
- Litigation status: No class action filed; multiple law firm investigations announced
- Source: Texas Attorney General – Data Security Breach Report BR-0005320; Quatrro Official Breach Notification Letter (via ClassAction.org); UpGuard – Quatrro Data Breach; ContinuServe Rebranding Press Release
What Should You Do?
If you received a notice from Quatrro — or believe your information may have been involved — enroll in the complimentary credit monitoring and identity protection services offered through Kroll as soon as possible and note any enrollment deadline stated in your notice. You should also place a fraud alert or credit freeze with the three major credit bureaus (Equifax, Experian, and TransUnion) to make it harder for anyone to open new accounts in your name. Monitor your bank accounts, credit card statements, and existing credit reports closely for any unauthorized activity. You can request free copies of your credit reports at AnnualCreditReport.com. Because health insurance policy numbers were among the data types reported as exposed, review any Explanation of Benefits statements you receive from your insurer and check your medical records for services you did not receive. If you suspect identity theft, report it at IdentityTheft.gov, which can help you create a personalized recovery plan.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
