MisusePrivilege AbuseSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
PROGRESSIVE CASUALTY INSURANCE COMPANY
bd_6fdb433608093ae3 · schema v1 · pii pii-v1
Full breach record for PROGRESSIVE CASUALTY INSURANCE COMPANY →Progressive Casualty Insurance Company notified Delaware residents of a security incident involving a third-party call center provider. Between May 2021 and May 19, 2023, unauthorized individuals accessed customer data using improperly shared employee credentials. Affected data included names, addresses, driver's license numbers, emails, phone numbers, and dates of birth. Progressive engaged Experian to provide 24 months of complimentary credit monitoring and identity restoration services.
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2023/08/Experian-sample-letter.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 1, 2023
- Raw hash
- 34a82b98295b4207756701cbbb9d357e13a10d5a7a1044a7d26c8d1482761694
Reporting entity
- Name
- The Progressive Group of Insurance Companiesnorm: the progressive group of insurance companies
Victim entity
- Name
- PROGRESSIVE CASUALTY INSURANCE COMPANYnorm: progressive casualty insurance
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Aug 1, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified law enforcement
- Third party
- via Third-party call center provider
- Initial access
- valid_credentials
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.