HackingFinancial ServicesTechnologyFinanceStolen CredentialsPhishingTargetedCustomer Data InvolvedFinancial accountFinancial credentialsAuthenticationLowContained

Progrexion ASG, Inc.

bd_a8c9c7ce9849f6c9 · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 8, 2021

Filed

Jun 8, 2021

To disclose

9 weeks

Affected

363state residents only

Linked

11 filings

Confidence

66%

Full breach record for Progrexion ASG, Inc. →2 incidents on file

Progrexion ASG, Inc. notified individuals of an incident discovered on April 8, 2021, where a malicious third party used stolen credentials to access public-facing platforms. The attacker viewed FICO scores, account numbers, and limited account details. Progrexion took platforms offline, notified the NCCIC, and provided 24 months of TransUnion identity theft protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 weeks / 61 days

Apr 8, 2021

Discovered

Jun 8, 2021

Filed

vs. sector median

on median

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Washington State AGbd_aecd5c3cdc8eb9f02021-06-08Verified
Idaho State AGbd_dcc52e70a3f467042021-06-08Verified
New Hampshire State AGbd_238445988127ff192021-06-09 · +1dVerified
Massachusetts State AGbd_8521107b47f87e522021-06-09 · +1dVerified

Show 6 more filings ↓up to 34d gap

California State AGbd_c7acddbaaa1c8df22021-06-09 · +1dVerified
Delaware State AGbd_758cf1ceced1c3912021-06-16 · +8dVerified
Indiana State AGbd_ea321cd4e88250d92021-06-16 · +8dVerified
Oregon State AGbd_65824fe445e8ec0b2021-05-26 · +13dVerified
Idaho State AGbd_7917507aa07df9d62021-05-12 · +27dCandidate
Maine State AGbd_3c997f440ca227c42021-07-12 · +34dVerified

Name: Progrexion ASG, Inc.
norm: progrexion asg

Name: Progrexion ASG, Inc.
norm: progrexion asg
Industry: Financial ServicesllmTechnologyllm

Discovered: Apr 8, 2021
Materiality determined: —
Notification sent: —
Affected individuals: 363state-resident count only
Data types: Financial accountFinancial credentialsAuthentication
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified the National Cybersecurity Communications and Integration Center (NCCIC)
Initial access: valid_credentials

During the incident: Took its public-facing platforms offline
Notified a law enforcement agency - the National Cybersecurity Communications and Integration Center (NCCIC)
Arranged and paying for you to receive a twenty-four (24) month membership in Trans Union’s Trueldentity theft protection services
Changes made: Evaluating its platforms to determine if additional controls should be implemented to reduce the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(61 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 10 states

View merged incident ↗

Idaho State AGMay 12 · first

Oregon State AG+14d

Washington State AG+27d

Idaho State AG+27d

South Carolina State AG+27d · this page

New Hampshire State AG+28d

Massachusetts State AG+28d

California State AG+28d

Delaware State AG+35d

Indiana State AG+35d

Maine State AG+61d

Pattern: first filing May 12 (ID), last Jul 12 (ME) — a 61-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2021/Progrexion.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 8, 2021
Raw hash: 17958942494d8ae6c19f4fc82f8320fd6b78467d3f0ad765bcf872f7dbd6978b

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityProgrexion ASG, Inc.

Victim entityProgrexion ASG, Inc.

Incidentdiscovered Apr 8, 2021

Stated responseTook its public-facing platforms offline

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov