MisuseFinancial ServicesFinancePrivilege AbuseEmployee Data InvolvedCustomer Data InvolvedPIIIdentity (basic)Government IDMediumContained

Progressive County Mutual Insurance Company

bd_5e77fdeafcb0ab7c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 1, 2024

Filed

Jun 7, 2024

To disclose

10 weeks

Affected

56state residents only

Confidence

66%

Full breach record for Progressive County Mutual Insurance Company →2 incidents on file

Progressive insurance companies notified NH AG of an insider incident where an employee used a false identity to obtain employment. The employee accessed customer call data from Oct 2023 to Apr 2024. 56 NH residents were notified on June 7, 2024, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 158 days

discovery → filing · 10 weeks / 67 days

Oct 26, 2023

Begins

Apr 1, 2024

Discovered

Jun 7, 2024

Filed

vs. sector median

+1 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed56 affectedView incident

Name: Progressive County Mutual Insurance Company
norm: progressive county mutual insurance

Name: Progressive County Mutual Insurance Company
norm: progressive county mutual insurance
Industry: Financial Servicesllm

Discovered: Apr 1, 2024
Breach occurred: Oct 26, 2023 – Apr 19, 2024
Undetected for: 158 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 7, 2024
Affected individuals: 56state-resident count only
Data types: PIIIdentity (basic)Government ID
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: Internal
Regulator citations: Notified Attorney General John Formella
Initial access: insider_action

During the incident: Began an internal investigation
Suspended the employee
Terminated the employee
Began mailing notification letters via United States First Class Mail
Offered free credit monitoring and identity theft restoration services through Kroll
Established a call center to answer individuals’ questions
Changes made: Offered free credit monitoring and identity theft restoration services through Kroll
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(67 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/progressive-county-mutual-direct-northern-select-universal-20240607.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 7, 2024
Raw hash: 8ea5615f6b0cd0e7fc90683ac655fc5f49a33f4098ede42bbd9eeac1564075fc

Reporting entityProgressive County Mutual Insurance Company

Victim entityProgressive County Mutual Insurance Company

Incidentdiscovered Apr 1, 2024

Stated responseBegan an internal investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov