MisusePrivilege AbuseSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
PROGRESSIVE CASUALTY INSURANCE COMPANY
bd_3d21615407581ec9 · schema v1 · pii pii-v1
Full breach record for PROGRESSIVE CASUALTY INSURANCE COMPANY →Progressive Casualty Insurance Company notified Hawaii residents of a security incident involving a third-party call center provider. Employees of the provider improperly shared access credentials with unauthorized individuals, who accessed customer personal information including names, addresses, driver's license numbers, and dates of birth. The incident was discovered on May 19, 2023. Progressive engaged Experian to provide complimentary credit monitoring and identity restoration services.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_13eee63ab5d15a5bWashington State AGfiled 2023-08-01Candidate
- bd_9232e4d288f699c0Maine State AGfiled 2023-08-01Verified
- bd_daa70fe37b441c8fCalifornia State AGfiled 2023-08-01Verified
- bd_dcb87249ca236b46Oregon State AGfiled 2023-08-01Verified
Source provenance
- Source URL
- https://cca.hawaii.gov/wp-content/uploads/2026/05/Letter.2023-0897.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 1, 2023
- Raw hash
- 5bed133cf4adb2832856bdd15e7ac74bf20e85ea81c8b9c5898123b015b76f5a
Reporting entity
- Name
- PROGRESSIVE CASUALTY INSURANCE COMPANYnorm: progressive casualty insurance
Victim entity
- Name
- PROGRESSIVE CASUALTY INSURANCE COMPANYnorm: progressive casualty insurance
Incident
- Discovered
- May 19, 2023
- Materiality determined
- —
- Notification sent
- Aug 1, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Insider
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- Internal
- Regulator citations
- Notified law enforcement
- Initial access
- insider_action
Compliance
- Time to disclose
- 11 weeks(74 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.