Product leasing giant Progressive Leasing warns sensitive information stolen in cyberattack

Progressive Leasing, a billion-dollar company that allows people to lease consumer products, announced that it experienced a cybersecurity incident affecting certain of its systems.

The company said it is still investigating the incident but has seen no "major" operational impacts to its services due to the attack. Progressive Leasing also said that it believes the involved data contained a "substantial amount" of personally identifiable information (PII), including Social Security numbers, of its customers and other individuals.

Progressive Leasing said that it is working with law enforcement and third-party cybersecurity experts to investigate the incident and respond to it. The company also said that it will provide notice to those individuals whose PII was involved in the incident, as well as to regulatory authorities, in accordance with applicable laws.

Meanwhile, the AlphV/Black Cat ransomware gang took credit for the attack on Friday. Alvieri added that the company has been added to the gang’s leak site and that the gang claims to have stolen the personal information of more than 40 million customers.

Progressive Leasing is a Salt Lake City-based company that has dozens of partnerships with major retailers like Best Buy, Samsung, Cricket, Lowe’s, Zales, Overstock, and Dell. The company is one of the biggest lease-to-own companies in operation and is part of a larger corporation, PROG Holdings.