Comparison Overview
Doyle Carden Group

Doyle Carden Group
5 Penn Plaza, New York, 10001, US
Last Update: 22/02/2026
The Doyle Carden Group is an investigative and AML consulting firm that has assisted financial institutions of all sizes and geographies with the day to day management of their AML compliance needs. Our more than one thousand AML Investigators are experienced in a vari...

Principal Financial Group
711 High St., Des Moines, Iowa, US, 50309
Last Update: 02/04/2026
Principal Financial Group® is dedicated to improving the wealth and well-being of people and businesses around the world—helping more than 62M customers plan, protect, invest, and retire as of December 31, 2023. Along the way, we commit to supporting the communities whe...
Compliance Ranges Comparison

Doyle Carden Group







Principal Financial Group






Benchmark & Cyber Underwriting Signals
Incidents vs Financial Services Industry Avg (This Year)
No incidents recorded for Doyle Carden Group in 2026.
Incidents vs Financial Services Industry Avg (This Year)
No incidents recorded for Principal Financial Group in 2026.
Incident History - Doyle Carden Group (X = Date, Y = Severity)
Doyle Carden Group cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Principal Financial Group (X = Date, Y = Severity)
Principal Financial Group cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Doyle Carden Group

Principal Financial Group
FAQ
Latest Global CVEs
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.
Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.