MisuseFinancial ServicesFinancePrivilege AbuseCustomer Data InvolvedGovernment IDFinancial accountPIIMediumContained

Progressive Direct Insurance Company, Progressive Northern Insurance Company and Progressive Universal Insurance Company

bd_7ca64c2acea864d3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 1, 2025

Filed

Jul 25, 2025

To disclose

21 weeks

Affected

40state residents only

Confidence

66%

Progressive insurance companies notified NH AG of an insider incident where an employee used a false identity to obtain employment. The employee accessed customer data (driver's license, payment card, financial account) from Oct 2023 to Apr 2025. 40 NH residents notified on July 25, 2025, offered 2 years credit monitoring. No evidence of misuse found.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 495 days

discovery → filing · 21 weeks / 146 days

Oct 23, 2023

Begins

Mar 1, 2025

Discovered

Jul 25, 2025

Filed

vs. sector median

+12 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed40 affectedView incident

Name: Progressive Direct Insurance Company, Progressive Northern Insurance Company and Progressive Universal Insurance Company
norm: progressive direct insurance company progressive northern insurance company progressive universal insurance company

Name: Progressive Direct Insurance Company, Progressive Northern Insurance Company and Progressive Universal Insurance Company
norm: progressive direct insurance company progressive northern insurance company progressive universal insurance company
Industry: Financial Servicesllm

Discovered: Mar 1, 2025
Breach occurred: Oct 23, 2023 – Apr 27, 2025
Undetected for: 495 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 25, 2025
Affected individuals: 40state-resident count only
Data types: Government IDFinancial accountPII
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: Internal
Regulator citations: Notified New Hampshire Attorney General
Initial access: insider_action

During the incident: Began an internal investigation
Offered two years of free credit monitoring and identity theft restoration services through Kroll
Established a call center to answer individuals’ questions
Mailed notification letters via United States First-Class mail
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(146 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/progressive-direct-insurance-northern-universal-20250725.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 25, 2025
Raw hash: 270acfe1bba980acc12eadda31e6f1bec2dcb314685d0bb39c6e4a5b18de46bc

Reporting entityProgressive Direct Insurance Company, Progressive Northern Insurance Company and Progressive Universal Insurance Company

Victim entityProgressive Direct Insurance Company, Progressive Northern Insurance Company and Progressive Universal Insurance Company

Incidentdiscovered Mar 1, 2025

Stated responseBegan an internal investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov