Prudential Insurance Company of America notified the California AG that a vendor inadvertently sent an electronic file containing personal information (name, address, SSN, account number, financial info) of variable annuity contract holders to an unauthorized corporate client. The recipient deleted the file without viewing it. Prudential implemented additional quality control screening measures and offered two years of identity monitoring via Kroll.