FEDERALItem 8.01 · voluntaryHackingDelayed DiscoveryCustomer Data InvolvedPIIIDENTITY_GOVERNMENTMediumActive
Progressive Leasing Lease-to-Own
bd_981201c9f13646f0 · schema v1 · pii pii-v1
Full breach record for Progressive Leasing Lease-to-Own →PROG Holdings, Inc. reported a cybersecurity incident at its Progressive Leasing subsidiary. The investigation is ongoing, involving PII including SSNs of customers. The company engaged third-party experts and notified law enforcement. No material financial impact is currently expected.
SEC clockMateriality determined Sep 18, 2023 → Filed Sep 21, 20233d ✓ SEC 4-day OK3 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_9c14cbb322c10271California State AGfiled 2023-10-22(31d gap)Verified
- bd_1d1b9dd739810e98Montana State AGfiled 2023-10-23(32d gap)Verified
- bd_2343ba4ecbd94ae8Oregon State AGfiled 2023-10-23(32d gap)Verified
- bd_acf2552b7336114eDelaware State AGfiled 2023-10-23(32d gap)Verified
Show 2 more filings ↓Show fewer ↑up to 39d gap
- bd_2047ab3d4f323b6cWashington State AGfiled 2023-10-24(33d gap)Verified
- bd_707166e8373b559aNew Hampshire State AGfiled 2023-10-30(39d gap)Verified
Source provenance
- Source URL
- https://www.sec.gov/Archives/edgar/data/1808834/000119312523239623/
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Sep 21, 2023
- Raw hash
- 437f6be6b512b31dd66cdd0cf71cfdf266926d82fc2de5c4da4a16f12f3b7648
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- PROG Holdings, Inc.norm: prog holdings
- SEC CIK
- 0001808834
Victim entity
- Name
- Progressive Leasing Lease-to-Ownnorm: progressive leasing lease to own
- Domain
- progleasing.com
Incident
- Discovered
- Sep 18, 2023
- Materiality determined
- Sep 18, 2023
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- regulatory authorities
Compliance
- Time to disclose
- 3 days(3 days from discovery to filing)
- Compliance flags
- SEC 4-day OK · 3d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status SEC Materiality determined: Sep 18, 2023→ Filed: Sep 21, 20233d cal. 4 business days SEC 4-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.