Progressive Auto Group Hit by Data Breach, Class Action Lawsuit Filed Over Delayed Notifications
A class action lawsuit has been filed against Progressive Auto Group in Massillon, Ohio, following a data breach that exposed sensitive customer information. The breach, which occurred on June 20, 2025, was allegedly carried out by the hacking group "Nitrogen" and affected 1,680 individuals.
Despite the breach happening in June, customers did not begin receiving notification letters until late December 2025, with some reporting delays into January 2026. The lawsuit, filed in Stark County, accuses the dealership of waiting seven months to inform affected individuals.
Exposed data included Social Security numbers, driver’s license numbers, debit card details, and banking information. One plaintiff, a Canton resident who purchased a vehicle from the dealership in 2025, reported becoming a victim of identity theft and experiencing a credit reduction after the breach.
Affected customer Aaron Lucarelli described the stress of securing his credit with all three bureaus, expressing concerns over potential financial damage. Progressive Auto Group has offered one year of free credit monitoring to impacted individuals but has not yet responded to requests for comment.
Progressive Independent Agents cybersecurity rating report: https://www.rankiteo.com/company/progressive-independent-agents
"id": "PRO1771972264",
"linkid": "progressive-independent-agents",
"type": "Breach",
"date": "2/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '1680',
'industry': 'Automotive',
'location': 'Massillon, Ohio, USA',
'name': 'Progressive Auto Group',
'type': 'Dealership'}],
'customer_advisories': 'One year of free credit monitoring offered to '
'impacted individuals',
'data_breach': {'number_of_records_exposed': '1680',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Social Security numbers',
'Driver’s license numbers',
'Debit card details',
'Banking information']},
'date_detected': '2025-06-20',
'date_publicly_disclosed': '2025-12-01',
'description': 'A class action lawsuit has been filed against Progressive '
'Auto Group following a data breach that exposed sensitive '
'customer information. The breach was allegedly carried out by '
"the hacking group 'Nitrogen' and affected 1,680 individuals. "
'Customers were notified with significant delays, some as late '
'as January 2026, despite the breach occurring in June 2025.',
'impact': {'brand_reputation_impact': 'Yes',
'customer_complaints': 'Yes',
'data_compromised': 'Social Security numbers, driver’s license '
'numbers, debit card details, and banking '
'information',
'identity_theft_risk': 'Yes',
'legal_liabilities': 'Class action lawsuit filed',
'payment_information_risk': 'Yes'},
'references': [{'source': 'Class action lawsuit filing'}],
'regulatory_compliance': {'legal_actions': 'Class action lawsuit filed in '
'Stark County'},
'response': {'communication_strategy': 'Delayed notifications (7 months after '
'breach)'},
'threat_actor': 'Nitrogen',
'title': 'Progressive Auto Group Data Breach and Delayed Notifications',
'type': 'Data Breach'}