The Maine Office of the Attorney General reported a data breach at Principal Life Insurance Company on February 11, 2022. The breach involved the inadvertent disclosure of personal information, including Social Security Numbers, affecting 137 individuals in total, with 1 resident affected. Identity theft protection services were offered for 24 months following the breach notification sent on March 15, 2022.

On July 6, 2021, Principal Financial Group experienced a data breach when an employee inadvertently exposed sensitive personal information of two Maine residents via a Facebook post. The compromised data, displayed on the employee’s computer screen, included names, dates of birth, and Social Security numbers—highly sensitive details that could facilitate identity theft or financial fraud. The breach was reported to the Maine Office of the Attorney General on July 22, 2021. Affected individuals were offered one year of credit monitoring through Equifax as a remedial measure. While the incident involved a limited number of victims, the exposure of Social Security numbers elevates the risk of long-term harm, including potential fraud or misuse of personal identities. The breach stemmed from human error rather than a targeted cyber attack, but the unintentional disclosure of such critical data underscores vulnerabilities in internal data-handling protocols and employee awareness training.

On May 11, 2021, Principal Financial Group experienced a data breach due to the inadvertent disclosure of personally identifiable information (PII). The incident, reported to the Maine Office of the Attorney General on May 25, 2021, exposed the first names, last names, and Social Security numbers of three Maine residents. Such sensitive data exposure poses a significant risk of identity theft, prompting the company to offer affected individuals one year of identity theft protection services. The breach highlights vulnerabilities in data handling practices, particularly concerning the safeguarding of critical personal identifiers. While the scale of the breach was limited to three individuals, the nature of the compromised data—Social Security numbers—elevates the potential for severe consequences, including financial fraud and long-term identity misuse. The company’s response included mitigative measures, but the incident underscores the ongoing challenges in protecting sensitive customer information from unintended disclosures.

The Washington State Office of the Attorney General reported that Principal Financial Group experienced a data breach on November 23, 2019, due to a software coding issue that inadvertently displayed personal information of 583 customers. The breach persisted until January 6, 2020, affecting names and Social Security numbers but reportedly did not result in any loss or theft of information.