Edelson Lechtzin LLP Investigates The Vanguard Group, Inc. Data Breach Reportedly Exposing Investors' Social Security Numbers - PR Newswire

Edelson Lechtzin LLP, a national class action law firm, has initiated an investigation into a reported data breach at The Vanguard Group, Inc. The firm is offering free, confidential case reviews to current and former Vanguard investors who may have been affected.

On November 4, 2026, Vanguard filed a breach notification with the Vermont Attorney General, reporting that 94 Vermont residents were affected by an incident involving Social Security numbers. Public reports and a newly filed class action describe a far larger event: threat actors claimed in mid-October 2026 to have accessed Vanguard's network servers and advertised a database on a dark web forum.

A cybersecurity firm reported more than 14 million Vanguard-linked records were offered online. Vanguard has not confirmed those claims or said how many people were affected nationwide, and the cybersecurity firm called the alleged breach unverified.

The Vermont filing identifies Social Security numbers as among the information involved. Public reports and state filings indicate the records may also include full legal names and account data held in Vanguard's systems. A cybersecurity firm reported the data offered online included SMS verification logs with timestamps, phone numbers, countries, and carriers.

Because Social Security numbers are among the most sensitive identifiers, any exposure heightens the risk of identity theft and fraud. The investigation focuses on current and former Vanguard clients — individual and institutional investors — whose personal information the company held.

According to the class action, Vanguard does not appear to have notified affected individuals, leaving many unsure whether their data was involved. Anyone with an active or former Vanguard account is encouraged to come forward.

Edelson Lechtzin LLP is investigating a potential class action on behalf of affected individuals. A successful case could recover compensation for lost time, out-of-pocket costs, and loss of privacy, and press Vanguard to strengthen its data protection. The firm evaluates claims at no cost.

Affected individuals are advised to review their Vanguard account statements and credit reports, and preserve any breach notice they receive. They should also place a free fraud alert or credit freeze with Equifax, Experian, and TransUnion, and get free reports at AnnualCreditReport.com.

People who suspect identity theft should report it to the FTC at IdentityTheft.gov. They may also speak confidentially with a data privacy attorney, such as Marc Edelson, Esq., of Edelson Lechtzin LLP, by calling 844-696-7492 or emailing [email protected].