Progressive Insurance Hit By a Data Breach Putting 347,100 Customers at Risk

Progressive is a large insurance company based in Mayfield Village, Ohio. The company is known throughout the United States and other parts of the world and is responsible for insuring many US citizens. The organization employs over 49,000 workers and generates an estimated $48 billion in annual revenue. Since Progressive is an insurance company, it handles personal data, medical information, and other sensitive details about individuals. All this data is put at risk when the company suffers from data breaches like the one it recently announced. 

How Did the Attack Occur?

Progressive relies on third-party companies to provide its customer service help. One of these third-party organizations accidentally gave unauthorized individuals access to confidential Progressive customer data. While the individuals didn't hack into the network to obtain the data, they still gained access to a wealth of personal information for a large number of Progressive customers and could misuse it if they decided to. 

What Information Was Viewed or Stolen?

Among the data made available to the unauthorized individuals, there was personal information such as birth dates, phone numbers, home addresses, email addresses, Driver's license numbers, and more. Enough protected information was made available for it to be a security concern for affected Progressive customers. We don't know how this data will be used, if it is used at all, but it's essential for everyone involved to take steps to protect themselves and to assume they may be victims of a cyber attack in the future. 

How Did Progressive Admit to the Breach?

Progressive took two steps to make it known that consumer data was at risk after this breach. The first step was to send a notice to the Attorney General's office in Maine that explained the details of the breach. The second step was to send notices to every potential consumer involved in the breach. Both steps were completed on August 1, 2023. If you receive one of the individual notices from the insurance company, you should immediately start watching over your accounts and credit information. 

What Will Become of the Stolen Information?

It is difficult to say what will happen to this Progressive consumer data given to unauthorized individuals. Since the individuals that gained access to the data points weren't hackers hoping to misuse the information, it's less likely for the data to be misused than if it was taken by attackers directly. It is still possible for some of the people involved to use the information for identity theft or phishing attacks. 

What Should Affected Parties Do in the Aftermath of the Breach?

Anyone that receives a notice from Progressive about the breach should assume your information is at risk and that you could suffer a data attack in the future. Check your credit for any potential changes, and consider identity theft protection services as well. This attack is less likely to be harmful than many data attacks, but it's still important to be aware of the risks you face.