HackingFinancial ServicesFinanceStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDHighContained

PROGRESSIVE CASUALTY INSURANCE COMPANY

bd_8022aaac26b72ebc · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Aug 1, 2023

To disclose

—

Affected

10,157state residents only

Linked

9 filings

Confidence

66%

Full breach record for PROGRESSIVE CASUALTY INSURANCE COMPANY →5 incidents on file

Progressive Casualty Insurance Company notified South Carolina residents that a third-party call center provider's employees shared access credentials with unauthorized individuals, exposing customer PII including names, addresses, driver's license numbers, and DOBs. The incident was discovered in May 2023; affected individuals were offered credit monitoring.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

May 1, 2021

Begins

Aug 1, 2023

Filed

This filing is one of 9 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Washington State AGbd_13eee63ab5d15a5b2023-08-01Candidate
Hawaii State AGbd_3d21615407581ec92023-08-01Verified
Indiana State AGbd_670659974b1e74332023-08-01Verified
Delaware State AGbd_6fdb433608093ae32023-08-01Verified

Show 4 more filings ↓

Maine State AGbd_9232e4d288f699c02023-08-01Verified
California State AGbd_daa70fe37b441c8f2023-08-01Verified
Oregon State AGbd_dcb87249ca236b462023-08-01Verified
Massachusetts State AGbd_dd05f3659c055ade2023-08-01Verified

Name: PROGRESSIVE CASUALTY INSURANCE COMPANY
norm: progressive casualty insurance

Name: PROGRESSIVE CASUALTY INSURANCE COMPANY
norm: progressive casualty insurance
Industry: Financial Servicesllm

Discovered: —
Breach occurred: May 1, 2021
Materiality determined: —
Notification sent: Aug 1, 2023
Affected individuals: 10,157state-resident count only
Data types: Identity (basic)Government ID
Data elements: Date of birth
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: notified law enforcement
Initial access: valid_credentials

During the incident: Launched a comprehensive investigation and extensive analysis
Took steps to block the unauthorized access
Working with its third-party service providers to help protect against similar incidents in the future
Secured the services of Experian to provide credit and identity monitoring at no cost
Changes made: Working with its third-party service providers to help protect against similar incidents in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: SC CRA notice due
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Washington State AGAug 1 · first

Hawaii State AGAug 1 · first

Indiana State AGAug 1 · first

Delaware State AGAug 1 · first

Maine State AGAug 1 · first

California State AGAug 1 · first

Oregon State AGAug 1 · first

Massachusetts State AGAug 1 · first

South Carolina State AGAug 1 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/ProgressiveCasualtyInsuranceCompany.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 1, 2023
Raw hash: c7abfa317cecb74e99d158e474463c88d8b563ab182154989a4dd2976babab86

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityPROGRESSIVE CASUALTY INSURANCE COMPANY

Victim entityPROGRESSIVE CASUALTY INSURANCE COMPANY

IncidentThird-Party / Supply Chain

Stated responseLaunched a comprehensive investigation and extensive analysis

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov