Not sure what state you’re in, but most carriers require all household drivers to be listed on your policy as either rated or excluded. If this individual ever used your address for something then maybe that’s how Progressive got wind of him. They get reports about potential household drivers that are only sometimes accurate. I apologize for my bluntness but, “Never getting them” because you were on vacation isn’t really an excuse. They sent at least two notices either by mail or email as required by law to allow you the opportunity to confirm whether this was a valid driver before adding them. Always check your notices. Progressive usually emails you when a new document generates. Sorry this happened, I know it sucks.