XML 31 R21.htm IDEA: XBRL DOCUMENT
v3.25.1

Cyber Related Matters | 3 Months Ended
--- | ---
Feb. 28, 2025
Health Care Organizations [Abstract] |
Cyber Related Matters | Cyber Related Matters MOVEit Vulnerability As previously disclosed, on the evening of May 28, 2023, we learned that our MOVEit Transfer (the on-premise version) and MOVEit Cloud (a cloud-hosted version of MOVEit Transfer) products were attacked by a threat actor who compromised and exfiltrated personal data from various customer-controlled MOVEit Transfer environments (the "MOVEit Vulnerability"). As a result of the MOVEit Vulnerability, we are party to certain class action lawsuits filed by individuals who claim to have been impacted by the exfiltration of data from the environments of our MOVEit Transfer customers, which have been centralized in multi-district litigation in the District of Massachusetts (the "MDL"). The MDL remains in a relatively early litigation stage in which motions to dismiss have been filed but not yet ruled upon. In the event dismissals are not granted, the MDL is not expected to conclude within this fiscal year. We have also been cooperating with inquires and investigations from various governmental authorities, none of which have, as of this filing, resulted in any prosecution or enforcement actions. Expenses Incurred and Future Costs For the three months ended February 28, 2025 and February 29, 2024, we incurred net costs of $0.7 million and $1.0 million, respectively, related to the MOVEit Vulnerability. The costs recognized are net of insurance recoveries of $0.7 million and $0.8 million for the three months ended February 28, 2025 and February 29, 2024, respectively. The timing of recognizing insurance recoveries may differ from the timing of recognizing the associated expenses. We expect to continue to incur investigation, legal and professional services expenses associated with the MOVEit Vulnerability in future periods. We will recognize these expenses as services are received, net of insurance recoveries. While a loss from these matters is reasonably possible, we cannot reasonably estimate a range of possible losses at this time, particularly while the foregoing matters remain ongoing. Furthermore, with respect to the MDL, the proceedings remain in the early stages, alleged damages have not been specified, there is uncertainty as to the likelihood of a class or classes being certified or the ultimate size of any class if certified, and there are significant factual and legal issues to be resolved. Also, each of the governmental inquiries and investigations mentioned above could result in adverse judgements, settlements, fines, penalties, or other resolutions, the amount, scope and timing of which could be material, but of which we are currently unable to reasonably estimate. Therefore, we have not recorded a loss contingency liability for the MOVEit Vulnerability as of February 28, 2025. Insurance Coverage During the period when the MOVEit Vulnerability occurred, we maintained $15.0 million of cybersecurity insurance coverage, which is expected to reduce our exposure to expenses and liabilities arising from these events. As of February 28, 2025, we have recorded approximately $6.5 million of insurance recoveries related to the MOVEit Vulnerability, providing us with approximately $6.0 million of remaining cybersecurity insurance coverage under the applicable policy. We will pursue recoveries to the maximum extent available under our insurance policies.

X
- Definition Cyber Related Matters + References No definition available. + Details
Name: | prgs_CyberRelatedMattersTextBlock
Namespace Prefix: | prgs_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References No definition available. + Details
Name: | us-gaap_HealthCareOrganizationsAbstract
Namespace Prefix: | us-gaap_
Data Type: | xbrli:stringItemType
Balance Type: | na
Period Type: | duration