HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedTargetedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalContained
Progrexion ASG, Inc.
bd_758cf1ceced1c391 · schema v1 · pii pii-v1
Full breach record for Progrexion ASG, Inc. →Progrexion ASG, Inc. disclosed a cybersecurity incident discovered on April 8, 2021, involving unauthorized access to its public-facing platforms. A malicious third party used the platforms to request information, resulting in the exfiltration of names, email addresses, and Social Security numbers of approximately 100,000 individuals. Progrexion engaged forensic investigators and implemented additional safeguards, notifying the Delaware Attorney General on June 9, 2021.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_c7acddbaaa1c8df2California State AGfiled 2021-06-09(7d gap)Verified
- bd_65824fe445e8ec0bOregon State AGfiled 2021-05-26(21d gap)Candidate
- bd_3c997f440ca227c4Maine State AGfiled 2021-07-12(26d gap)Verified
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2021/06/Progrexion-Data-Breach-Notification.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 16, 2021
- Raw hash
- 582502483c2e6ef08a35b57aa51f8638f9683491004c272293fafa9a9f38f341
Reporting entity
- Name
- Progrexion ASG, Inc.norm: progrexion asg
Victim entity
- Name
- Progrexion ASG, Inc.norm: progrexion asg
Incident
- Discovered
- Apr 8, 2021
- Materiality determined
- —
- Notification sent
- Jun 9, 2021
- Affected individuals
- 100,000
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified Delaware Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 10 weeks(69 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.