MisusePrivilege AbuseCustomer Data InvolvedIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPIIMediumContained
Progressive Direct Ins Co, Progressive Paloverde Ins Co, Progressive Southwester
bd_7ca64c2acea864d3 · schema v1 · pii pii-v1
Full breach record for Progressive Direct Ins Co, Progressive Paloverde Ins Co, Progressive Southwester →Progressive insurance companies notified NH AG of an insider incident where an employee used a false identity to obtain employment. The employee accessed customer data (driver's license, payment card, financial account) from Oct 2023 to Apr 2025. 40 NH residents notified on July 25, 2025, offered 2 years credit monitoring. No evidence of misuse found.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed40 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/progressive-direct-insurance-northern-universal-20250725.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 25, 2025
- Raw hash
- 270acfe1bba980acc12eadda31e6f1bec2dcb314685d0bb39c6e4a5b18de46bc
Reporting entity
- Name
- Progressive Direct Ins Co, Progressive Paloverde Ins Co, Progressive Southwesternorm: progressive direct ins co progressive paloverde ins co progressive southwester
Victim entity
- Name
- Progressive Direct Ins Co, Progressive Paloverde Ins Co, Progressive Southwesternorm: progressive direct ins co progressive paloverde ins co progressive southwester
Incident
- Discovered
- Mar 1, 2025
- Materiality determined
- —
- Notification sent
- Jul 25, 2025
- Affected individuals
- 40
- Data types
- IDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPII
- Attack vector
- Insider
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- Internal
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- insider_action
Compliance
- Time to disclose
- 21 weeks(146 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.