PROG Holdings, Inc.

ITEM 8.01. OTHER EVENTS. PROG Holdings, Inc. (the “Company”) today announced that its Progressive Leasing subsidiary (“Progressive Leasing”) recently experienced a cybersecurity incident affecting certain of Progressive Leasing’s systems. Promptly after detecting the incident, the Company engaged leading third-party cybersecurity experts and took immediate steps to respond to, remediate and investigate the incident. Law enforcement was also notified. There has been no major operational impact to any of Progressive Leasing’s services as a result of the incident and the Company’s other subsidiaries have not been impacted. The Company’s investigation into the incident, including identification of the data involved, remains ongoing. Based on preliminary findings from the Company’s investigation, the Company believes the involved data contained a substantial amount of personally identifiable information, including social security numbers, of Progressive Leasing’s customers and other individuals. Progressive Leasing will provide notice to those individuals whose personally identifiable information was involved in the incident, as well as to regulatory authorities, in accordance with applicable laws. While no company can ever eliminate the risk of a cyberattack, the Company has taken, and will continue to take, appropriate steps, working with its third-party cybersecurity experts, to further harden its systems to protect against future incidents. The Company has incurred, and may continue to incur, significant expenses to respond to, remediate and investigate this matter. The full scope of the costs and related impacts of this incident, including the extent to which these costs will be offset by the Company’s cybersecurity insurance, has not been determined. Although the Compa