UnknownGovernment IDFinancial accountHigh

Progressive Leasing

bd_bef96dbb3ba948a4 · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Oct 23, 2023

To disclose

—

Affected

2,541state residents only

Linked

10 filings

Confidence

95%

Full breach record for Progressive Leasing →2 incidents on file

Progressive Leasing reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-10-23. 2,541 Massachusetts residents were affected. The report records the breach type as electronic.

J jump to incidentP pin to compareR raw source

Massachusetts clock✓ MA credit monitoring due

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Oct 23, 2023

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 10 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Montana State AGbd_1d1b9dd739810e982023-10-23Verified
Oregon State AGbd_2343ba4ecbd94ae82023-10-23Verified
Maine State AGbd_31d8aa8dacf4c1cb2023-10-23Verified
Delaware State AGbd_acf2552b7336114e2023-10-23Verified

Show 5 more filings ↓up to 32d gap

Washington State AGbd_2047ab3d4f323b6c2023-10-24 · +1dVerified
South Carolina State AGbd_6e9645f368f8433a2023-10-24 · +1dVerified
California State AGbd_9c14cbb322c102712023-10-22 · +1dVerified
New Hampshire State AGbd_707166e8373b559a2023-10-30 · +7dVerified
SEC 8-Kbd_981201c9f13646f02023-09-21 · +32dCandidate

Name: Progressive Leasing
norm: progressive leasing
Domain: progleasing.com

Name: Progressive Leasing
norm: progressive leasing
Domain: progleasing.com

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 2,541state-resident count only
Data types: Government IDFinancial account
Data elements: Social Security numberFinancial account numberDriver's licence number
Stated not affected: Payment card number
The filing states these were not involved. Categories absent from both lists were not addressed either way.
Attack vector: Unknown

Compliance flags: MA credit monitoring due
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 9 states

View merged incident ↗

SEC 8-KSep 21 · first

California State AG+31d

Montana State AG+32d

Oregon State AG+32d

Maine State AG+32d

Delaware State AG+32d

Massachusetts State AG+32d · this page

Washington State AG+33d

South Carolina State AG+33d

New Hampshire State AG+39d

Pattern: first filing Sep 21, last Oct 30 (NH) — a 39-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/data-breach-report-2023/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 23, 2023
Raw hash: c17bc0c7a25ee1dd66d22a796c07a57aa90361e417d37657be05f4f5a645232d

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityProgressive Leasing

Victim entityProgressive Leasing

IncidentUnknown

ComplianceMA credit monitoring due

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov