Progressive Leasing Facing Class Action Over Cyberattack Affecting 200K [UPDATE]

New to ClassAction.org? Read our Newswire Disclaimer

Progressive Leasing has been hit with a proposed class action over a September 2023 cyberattack that reportedly impacted the personal data of nearly 200,000 current and former customers.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

The 47-page lawsuit says the data breach experienced by the company, which offers lease-to-own programs through which consumers can pay for various personal or household products over time, has compromised customers’ full names, addresses, phone numbers, email addresses, dates of birth, Social Security numbers and financial information.

According to an October 2023 notice letter sent to victims, the company launched an investigation after it detected a “cybersecurity incident” on September 11 that affected some of its systems. The defendant subsequently concluded that an unauthorized third party had gained access to its network on September 9 and obtained files containing certain customer and employee information, the notice says.

The suit argues that the private data, which Progressive Leasing allegedly stored unencrypted and unredacted, was compromised due to the company’s negligent cybersecurity practices. According to the case, Progressive Leasing “could have prevented this data breach by properly securing and encrypting the files and file servers” that housed consumers’ sensitive information.

In addition, the complaint contends that the notice letter was inadequate in that it failed to explain how cybercriminals gained access to the system and what steps are being taken to safeguard stored data in the future.

“Without these details, [the plaintiff’s] and class members’ ability to mitigate the harms resulting from the data breach is severely diminished,” the filing adds.

Though the company has purportedly offered affected individuals 12 months of credit monitoring services, the suit claims that this gesture is “wholly inadequate” as it fails to address the lifelong risks of identity theft, fraud and other illegal schemes that victims now face as a result of the data breach.

The lawsuit looks to represent anyone in the United States whose personal information was disclosed in the data breach experienced by Progressive Leasing.

Get class action lawsuit news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter here.