MisuseFinancial ServicesFinancePrivilege AbuseEmployee Data InvolvedCustomer Data InvolvedIdentity (basic)Financial accountLowContained

Progressive Universal Insurance Company

bd_438d9e51c248e457 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 1, 2025

Filed

Aug 12, 2025

To disclose

27 weeks

Affected

1state residents only

Confidence

66%

Full breach record for Progressive Universal Insurance Company →2 incidents on file

Progressive Universal Insurance Company notified the New Hampshire Attorney General of an insider threat incident involving a former underwriting employee. The employee, arrested for possessing personal financial information, accessed customer data (names, bank/payment card numbers) via an internal application between March 5, 2024, and December 11, 2024. One New Hampshire resident was affected. Progressive suspended the employee, investigated, and offered two years of free credit monitoring and identity restoration services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 333 days

discovery → filing · 27 weeks / 192 days

Mar 5, 2024

Begins

Feb 1, 2025

Discovered

Aug 12, 2025

Filed

vs. sector median

+19 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Progressive Universal Insurance Company
norm: progressive universal insurance

Name: Progressive Universal Insurance Company
norm: progressive universal insurance
Industry: Financial Servicesllm

Discovered: Feb 1, 2025
Breach occurred: Mar 5, 2024 – Dec 11, 2024
Undetected for: 333 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: InternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: insider_action

During the incident: Suspended the employee
Began an investigation
Mailed notification letters via United States First-Class mail
Offered two years of free credit monitoring and identity theft restoration services
Changes made: Offered two years of free identity theft detection and restoration services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 weeks(192 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/progressive-universal-insurance-20250812.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 12, 2025
Raw hash: 918e35add3e2084a154cdfc41bd6eaf66ec7dffc7cba7856341d7f7a0c5df2ad

Reporting entityProgressive Universal Insurance Company

Victim entityProgressive Universal Insurance Company

Incidentdiscovered Feb 1, 2025

Stated responseSuspended the employee

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov