DisclosureLens
AccidentalFinancial ServicesFinanceMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDMediumContained

PRINCIPAL FINANCIAL GROUP, INC.

bd_1a0b7dfdead66acf · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 9, 2019

Filed

Jul 22, 2019

To disclose

13 days

Affected

2state residents only

Linked

2 filings

Confidence

66%
Full breach record for PRINCIPAL FINANCIAL GROUP, INC. →13 incidents on file

Principal Financial Group notified NH AG of inadvertent disclosure of PII (names, SSNs) for 2 NH residents. Data was improperly uploaded to a public GitHub account by a contractor on Jan 9, 2018. Principal discovered the upload on July 9, 2019, during internal testing, and had GitHub delete the file on July 11, 2019. Affected individuals were offered one year of credit monitoring.

Incident timeline

undetected · 546 days
discovery → filing · 13 days

Jan 9, 2018

Begins

Jul 9, 2019

Discovered

Jul 22, 2019

Filed

vs. sector median

6 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings · 2 states

View merged incident ↗
Massachusetts State AGJul 17 · first
New Hampshire State AG+5d · this page

Pattern: first filing Jul 17 (MA), last Jul 22 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.