PROGRESSIVE CORP/OH/

Progressive Paloverde Ins Co Progressive Southeastern Ins Co reported a data breach to the Indiana Attorney General. The breach occurred on 2024-03-04 and was reported on 2025-08-15. 2 Indiana residents were affected. 277 individuals affected in total.

Progressive Universal Insurance Company notified the New Hampshire Attorney General of an insider threat incident involving a former underwriting employee. The employee, arrested for possessing personal financial information, accessed customer data (names, bank/payment card numbers) via an internal application between March 5, 2024, and December 11, 2024. One New Hampshire resident was affected. Progressive suspended the employee, investigated, and offered two years of free credit monitoring and identity restoration services.

Progressive Southeastern Insurance Company notified consumers of an insider threat incident where an employee used a false identity to obtain employment. The employee accessed customer information (names, addresses, data elements) between Oct 2023 and Apr 2025. No evidence of consumer data misuse was found. The company offered two years of free identity monitoring via Kroll.

Progressive Direct Insurance Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-07-25. 453 Massachusetts residents were affected.

Progressive Direct Insurance Company reported a data breach to the Indiana Attorney General. The breach occurred on 2023-10-23 and was reported on 2025-07-25. 130 Indiana residents were affected. 3,785 individuals affected in total.

Progressive Direct Insurance Company notified 27 Nebraska residents that an employee used a false identity to obtain employment and accessed customer data (driver's license, payment card, financial account numbers) between Oct 2023 and Apr 2025. No evidence of misuse was found. Notifications were mailed July 25, 2025, offering two years of credit monitoring.

Progressive Casualty Insurance Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-06-25. 22 Massachusetts residents were affected.

United Financial Casualty Company and Progressive Northwestern Insurance Company, subsidiaries of Progressive, reported a data breach affecting 14 Maine residents. The breach, which occurred between October 2023 and April 2024, involved the compromise of names and financial account or credit/debit card numbers along with access codes. The company discovered the incident in May 2024 and began notifying affected individuals on June 7, 2024, offering 24 months of credit monitoring and identity theft protection services through Kroll.

Progressive Casualty Insurance Company notified the WA AG of a security incident involving a third-party call center provider. Unauthorized individuals accessed customer PII (names, DOB, driver's licenses, SSNs, financial accounts) via stolen credentials shared by provider employees. Incident discovered May 19, 2023. ~8,325 WA residents affected. Notifications sent Aug 1, 2023, with credit monitoring offered.

Progressive Casualty Insurance Company notified Hawaii residents of a security incident involving a third-party call center provider. Employees of the provider improperly shared access credentials with unauthorized individuals, who accessed customer PII including names, addresses, driver's license numbers, and dates of birth. The incident was discovered on May 19, 2023, and Progressive engaged Experian to provide credit monitoring services.