MisusePrivilege AbuseEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
Progressive Southeastern Insurance Company
bd_4b7a5fdf2b45ade7 · schema v1 · pii pii-v1
Full breach record for Progressive Southeastern Insurance Company →Progressive Southeastern Insurance Company notified consumers of an insider threat incident where an employee used a false identity to obtain employment. The employee accessed customer information (names, addresses, data elements) between Oct 2023 and Apr 2025. No evidence of consumer data misuse was found. The company offered two years of free identity monitoring via Kroll.
Vermont clock✗ VT AG >45 bday21 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-07-25-progressive-southeastern-insurance-company-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 25, 2025
- Raw hash
- 2aa35f809bc76185a517217b61931e90eeaca27045b5592ae43e776912380e96
Reporting entity
- Name
- Progressive Southeastern Insurance Companynorm: progressive southeastern insurance
Victim entity
- Name
- Progressive Southeastern Insurance Companynorm: progressive southeastern insurance
Incident
- Discovered
- Mar 1, 2025
- Materiality determined
- Jul 25, 2025
- Notification sent
- Jul 25, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Insider
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- Internal
- Regulator citations
- Filed notice with Vermont Attorney General
- Initial access
- insider_action
Compliance
- Time to disclose
- 21 weeks(146 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.