PRINCIPAL FINANCIAL GROUP, INC.

Principal Financial Group notified Montana residents that on May 12, 2023, an employee inadvertently attached a customer's 2022 1099-INT form to an email sent to another client. The disclosure included name, address, truncated SSN, and account number. Principal offered one year of credit monitoring via Equifax.

Principal Financial Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-05-10. 2 Massachusetts residents were affected. The report records the breach type as electronic.

Principal Financial Group notified New Hampshire residents that on or about July 6, 2021, personal information (Name, DOB, SSN) was visible on an employee's computer screen in the background of a photo posted to Facebook. The post was deleted upon discovery. The company offered one year of Equifax credit monitoring and identity theft insurance.

Principal Financial Group notified New Hampshire residents that on May 11, 2021, personal information (name, SSN) was erroneously sent to an incorrect plan sponsor. The recipient deleted the file. Principal offered one year of credit monitoring.

Principal Financial Services, Inc. reported a software coding error on Principal.com that inadvertently displayed another customer's personal information (name, SSN, birthdate) to a logged-in user. The issue occurred between Nov 23, 2020 and Jan 6, 2020. 583 Washington residents were affected. No unauthorized access or data theft occurred. Credit monitoring was offered.

Principal Financial Group notified NH AG of a website coding error where customer PII (name, SSN) was inadvertently displayed to other customers. Issue occurred Nov 23-Dec 16, 2019. Discovered Jan 3, 2020 via customer reports. 14 NH residents affected. No data acquisition or misuse confirmed. Credit monitoring offered.

Principal Financial Group reported a data breach to the Montana Attorney General. The breach was reported on 2020-04-28. The breach occurred from 11/23/2019 to 1/6/2020. 86 Montana residents were affected.

PRINCIPAL FINANCIAL GROUP filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-192). The register records the breach as discovered on January 1, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Principal Financial Group notified NH AG of inadvertent disclosure of PII (names, SSNs) for 2 NH residents. Data was improperly uploaded to a public GitHub account by a contractor on Jan 9, 2018. Principal discovered the upload on July 9, 2019, during internal testing, and had GitHub delete the file on July 11, 2019. Affected individuals were offered one year of credit monitoring.

Principal Financial Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-07-17. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Principal Financial Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-05-02. 1 Massachusetts residents were affected. The report records the breach type as undefined.

Principal Financial Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-03-06. 3 Massachusetts residents were affected. The report records the breach type as electronic.

Principal Financial Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-06-16. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Principal Financial Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-03-27. 69 Massachusetts residents were affected. The report records the breach type as electronic.

Principal Financial Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-03-21. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Principal Financial Group inadvertently disclosed employee PII (names, addresses, SSNs, account balances) to a former employee's personal email on March 15, 2017. Four New Hampshire residents were affected. The incident was detected by a Data Loss Prevention tool. The company requested deletion and offered one year of credit monitoring.

Principal Financial Group reported an inadvertent disclosure of PII to a third-party COBRA vendor, Chard Snyder, on Feb 3-10, 2017. Discovered March 2, 2017. Affected 4 NH residents. Data included names, SSNs, addresses, DOBs, and COBRA eligibility info. Response included individual notification, credit monitoring offer, and internal process review.

Principal Financial Group inadvertently sent a January 2017 Contribution Report containing names and Social Security numbers to an incorrect plan sponsor on February 7, 2017. The error was discovered when the recipient notified Principal. Two New Hampshire residents were affected. Principal instructed deletion, notified affected individuals, and offered one year of Equifax credit monitoring.

Principal Financial Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2015-11-23. 6 Massachusetts residents were affected. The report records the breach type as paper.

Principal Financial Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2012-06-14. 7 Massachusetts residents were affected. The report records the breach type as undefined.

Principal Financial Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2012-01-18. 16 Massachusetts residents were affected. The report records the breach type as paper.

Pincipal Financial Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2010-05-18. 17 Massachusetts residents were affected. The report records the breach type as electronic.

Principal Life Insurance Company reported that an unauthorized person used valid employer credentials to access and view the personal information (including SSN, name, age, and employment status) of two New Hampshire residents in April 2010. The incident was discovered during an investigation into fraudulent online activity. Principal engaged the employer administrator to reset credentials, added an additional access code for authentication, and offered one year of free credit monitoring to the affected individuals.