MalwareRansomwareData ExfiltratedData EncryptedSupply Chain (3P Vendor)IDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Principal Life Insurance Company
bd_4d837053ea637208 · schema v1 · pii pii-v1
Full breach record for Principal Life Insurance Company →Principal Life Insurance Company, via third-party administrator Infosys McCamish Systems, LLC, disclosed a ransomware incident in November 2023. Unauthorized access and acquisition of personal information occurred between Oct 29 and Nov 2, 2023. Principal's internal systems were not compromised. Data types included names and government IDs. 24 months of credit monitoring offered.
Vermont clock✗ VT AG >45 bday35 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-07-03-principal-financial-group-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 3, 2024
- Raw hash
- c7e106f009951b4c57943426f60a8102ace382c4d4640170ae9a49161a9a9297
Reporting entity
- Name
- INFOSYS MCCAMISH SYSTEMS, LLCnorm: infosys mccamish
Victim entity
- Name
- Principal Life Insurance Companynorm: principal life insurance
Incident
- Discovered
- Nov 2, 2023
- Materiality determined
- —
- Notification sent
- Jul 3, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified law enforcement
Compliance
- Time to disclose
- 35 weeks(244 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.